Ai Security Risk Management

Ai Security Risk Management Cybersecurity Jobs

3 jobs found

20d ago

IAM Architect /Cybersecurity Architect

Atlantis IT group Dallas, TX

Dallas, TX

20d ago

Full time Agentic Ai Security Ai Authorization Ai Security

Apply Now

Job Description

Atlantis IT group is seeking an IAM Architect / Cybersecurity Architect to help shape authorization architecture and governance for AI applications and agents. This hybrid role in Dallas, TX will support integrated identity and access management for both human users and non-human identities, with technical leadership across cybersecurity and adjacent engineering teams.

Role focus

In this position, you will design a governance model for authorization in Identity and Access Management, serving as a subject matter expert for identity governance tied to AI systems. You will also provide technical leadership to cybersecurity teams by translating IAM and AI security concepts into implementation-ready architecture decisions.

Key responsibilities

Define the enterprise target-state architecture and governance model for identities, delegated authority, and authorization across AI applications, agents, tools, APIs, and human users.
Establish reusable authorization patterns for user-to-agent, agent-to-tool, machine-to-machine, and agent-to-agent interactions.
Design policy enforcement approaches supporting least privilege, Zero Standing Privilege (ZSP), separation of duties, context-aware access, runtime decisioning, and human-in-the-loop guardrails.
Define lifecycle governance for AI agents and other non-human identities, including registration, sponsorship, ownership, credential issuance, rotation, recertification, suspension, deprovisioning, and evidence retention.
Develop standards for OAuth 2.0, OIDC, token exchange, workload identity, delegated authorization, service accounts, and short-lived credentials.
Evaluate vendor and native platform capabilities and document options, tradeoffs, integration impacts, risks, and recommendations for Southwest.
Partner with teams including IAM, IGA, PAM, Enterprise Access Management, Cloud Security, Application Security, AI Engineering, AI Governance, Enterprise Architecture, and platform teams to align controls and operating responsibilities.
Create reference architectures, design principles, control requirements, decision records, implementation roadmaps, and adoption guidance.
Support solution reviews and threat-informed design decisions for AI use cases, MCP servers, agent tools, data access paths, and autonomous actions.
Define logging, traceability, audit evidence, and monitoring requirements connecting an agent action to the agent identity, sponsoring owner, delegated user or system, authorization decision, and affected resource.
Provide technical consultation to Cyber teams and translate complex IAM and AI security concepts for engineering, product teams, leaders, and governance forums.
Track relevant market and technology developments and recommend updates to architecture standards and strategic roadmaps.
Must be able to meet any physical ability requirements listed on this description.
May perform other job duties as directed by Employee’s Leaders.

Minimum qualifications

Minimum 3 years of experience solving complex problems and driving multiple stakeholders toward implementable solutions (prefer 5 years).
Minimum 3 years working in a cross-functional environment within the technology domain (prefer 5 years).
Ability to influence diverse customer groups to align on strategic goals and decisions.
Prefer at least 1 year working in a Scaled Agile Framework (SAFe) environment.
Ability to assume high-level responsibility and provide direction in a cross-functional, team-oriented environment.
Proficiency in Agile methodologies and collaborating effectively with cross-functional teams.
Deep expertise in enterprise Identity and Access Management (IAM) architecture and integration patterns for AI systems and agent-based environments.
Understanding of best practices for authorization enforcement across AI agents, tools, APIs, and human identities.
Knowledge of core authorization principles including least privilege access, Zero Standing Privilege (ZSP), policy enforcement, auditability, and runtime governance.
Experience designing OAuth 2.0 / OIDC flows for machine-to-machine and agent-to-agent communication.
Understanding of AI agent lifecycle governance including registration, credential rotation, deprovisioning, and auditability of autonomous actions.
Experience with secrets management and credential vaulting (e.g., CyberArk, HashiCorp Vault, AWS Secrets Manager).
Familiarity with AI safety and governance frameworks (NIST AI RMF, OWASP Top 10 for LLMs) and regulatory or compliance considerations for autonomous systems.
Strong communication and cross-team collaboration skills, including ability to translate complex IAM concepts for engineering and leadership audiences.
Strong hands-on knowledge of Privileged Access Management (PAM).
Strong hands-on knowledge of directory services (AD, eDirectory, LDAP).
Strong hands-on knowledge of workforce or enterprise IAM.
Strong hands-on knowledge of CIAM platforms and patterns.
Experience with IAM tools such as CyberArk, BeyondTrust, Ping, Azure AD, SailPoint, or similar.
Experience in cloud-based IAM (AWS, Azure, hybrid environments).
Ensure IAM solutions align with Zero Trust, least privilege, and identity-first security principles.
Exceptional attention to detail with strong documentation skills.
Self-motivated and proactive, committed to driving tasks to completion.
Ability to connect how programs integrate with company objectives.
Experience solving complex business and technical problems and identifying solution options.
Experience supporting (or leading) executive-level communication, such as project status updates and presentations requesting approval.
Ability to digest detailed information and summarize for appropriate stakeholders (Managers, Directors, VPs, etc.).
Experience with or thorough understanding of gathering business requirements for an implementation project.
Understands how to translate business needs into releases that deliver business value.
Ability to translate business processes into strategy and drive innovation to build capabilities.
Understands how to read the market landscape and implement best practices to remain competitive.
Ability to lead discussions with stakeholders from multiple backgrounds who have conflicting priorities, mediate when teams are not aligned, and drive toward a recommendation.
Critical thinking to identify, analyze, and interpret trends in complex data sets and develop recommendations.
Strong oral communication and executive-level presentation delivery skills.
Skilled influencer, negotiator, consensus-builder, and change agent.
Ability to recognize inefficiencies in processes and proactively suggest improvements.
Ability to work flexibly in changing priorities across enterprise objectives.
Must be able to comply with company attendance standards as described in established guidelines.
Must maintain a well-groomed appearance per company appearance standards as described in established guidelines.

Relevant technologies

OAuth 2.0, OIDC, MCP servers
AWS AgentCore
SailPoint Identity Security Cloud, SailPoint Entro Security
Ping Identity Platform, Ping Agent IAM Core module
CyberArk, CyberArk Idira
Privileged Access Management (PAM)
AD, eDirectory, LDAP
Microsoft Foundry, Microsoft EntraID
HashiCorp Vault, AWS Secrets Manager
Zero Standing Privilege (ZSP), NIST AI RMF, OWASP Top 10 for LLMs
ScAled Agile Framework (SAFe)
AWS, Azure

Location and work model

Dallas, TX (hybrid)
Minimum experience: 3 years

Atlantis IT group is an Equal Opportunity Employer, and Southwest Airlines is referenced in the role details.

View full job page →

1mo ago

Senior Manager, Cyber Security Product Manager, AppSec

Capital One McLean, VA

McLean, VA

1mo ago Closed

$230k - $262k/yr Full time Manager Agent Ai Security

This position is no longer accepting applications (closed Oct 31, 2026).

Job Description

Capital One is building security products that help protect applications at enterprise scale. In this onsite role in McLean, VA, you will own the Application Security (AppSec) product strategy, governance, and risk transformation, shaping how security capabilities align with the evolving threat landscape. You will also work across teams to evaluate tools, define AI-application security direction, and communicate risk clearly to stakeholders across the organization.

Salary: USD 229,900 - 262,400 per year (location-based). Incentives: performance-based incentive compensation may include cash bonus(es) and/or long term incentives (LTI).

Responsibilities

Own the multi-year Application Security product roadmap, aligning deliverables with enterprise risk appetites and changing threat conditions.
Serve as the primary liaison to Security Engineering Enablement and Architecture to translate security requirements into scalable, fix-first developer workflows.
Lead the strategic evaluation of AppSec security tools (SAST/DAST/SCA) to maximize ROI and maintain a best-in-class toolset.
Define the product strategy for AI-application security, including secure integration of AI agents into the SDLC, prompt engineering guardrails, and automated remediation pipelines.
Drive AppSec adoption through Office Hours and community forums, simplifying complex technical risks for executive leadership to support informed decision-making.
Establish the governance model for vulnerability disposition across SAST/DAST/OffSec, with clear SLAs, audit trails, and exception workflows that support velocity.

Requirements

Bachelor's Degree
7+ years of experience in cybersecurity or information technology
6+ years evaluating, contributing to, or supporting development of cybersecurity capabilities
3+ years of application security experience

Preferred Qualifications

7+ years working on teams and presenting cybersecurity information (metrics, threat intelligence, controls, and/or requirements) to stakeholders
3+ years developing or interpreting cybersecurity metrics or dashboards
3+ years of people management experience
2+ years developing or overseeing cybersecurity or technology risk programs
Familiarity with industry governance or financial governance processes
Ability to perform security incident analysis and assist with resolution, translating technical findings into clear, actionable reports for technical and non-technical stakeholders
4+ years in Application or Product Security or Software Engineering with emphasis on AppSec and vulnerability management strategy
4+ years managing AppSec products in a large-scale enterprise
2+ years defining standards for AI-augmented development and ethical AI usage
Professional certifications: CISSP, CISM, OSCP
2+ years experience in cloud-native environments (APIs, Web, Mobile, Containers, IaC, and CI/CD)
Knowledge of OWASP Top 10 and software supply chain security
Experience with automated DAST and manual Penetration Testing to build adversarial-based threat prevention roadmaps

Technologies

SAST, DAST, SCA, OffSec, SDLC

Work Authorization Notice: Capital One will not sponsor a new applicant for employment authorization, or offer immigration-related support for this position (including H1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN, E-3, O-1, or any other forms of work authorization requiring employer immigration support).

Other Details: No agencies please. Capital One is an equal opportunity employer (EOE, including disability/veteran), committed to non-discrimination in compliance with applicable federal, state, and local laws. Capital One promotes a drug-free workplace. Candidates should apply within a minimum of 5 business days. Capital One offers comprehensive, competitive, and inclusive health, financial, and other benefits to support your total well-being.

View full job page →

1mo ago

Enterprise Cybersecurity Architect

PAM Health, LLC Plano, TX 🇺🇸 Remote

Plano, TX

1mo ago Closed

Full time Ai Security Risk Management Application Security Cybersecurity Tools

This position is no longer accepting applications (closed Oct 24, 2026).

Job Description

The Enterprise Cybersecurity Architect will design and maintain PAM Health’s enterprise security architecture for a multi-state post-acute health system. This role develops security standards and reference architectures, conducts threat modeling and architecture reviews, and provides senior security subject matter expertise across IT, clinical, and business teams.

Security Architecture & Governance

Develop, maintain, and govern PAM Health’s enterprise security architecture, technical security standards, design patterns, and reference architectures.
Establish secure architecture standards for cloud, identity, network, endpoint, application security, data protection, logging, monitoring, and incident response.

Architecture Reviews & Security Requirements

Review enterprise, cloud, clinical, network, application, data, artificial intelligence, and medical device initiatives to ensure security requirements are incorporated prior to implementation.
Conduct threat modeling and security design reviews for new systems, major changes, integrations, and third-party solutions.
Define security requirements and architecture guardrails aligned with the NIST Cybersecurity Framework, HIPAA Security Rule, MITRE ATT&CK, OWASP guidance, and applicable regulatory requirements.

Risk, Controls, and Stakeholder Communication

Identify architectural risks, document required controls, recommend remediation, and communicate business and clinical impact to technical and executive stakeholders.

Security Leadership Across Teams & Third Parties

Partner with Information Technology, Network Operations, Clinical Informatics, Compliance, Privacy, Legal, and business leaders to integrate security into technology strategy and project delivery.
Provide technical direction and oversight to managed security service providers, technology vendors, consultants, and other third parties.

Application, AI/ML, and Medical Device Security

Support application security through secure development requirements, architecture reviews, vulnerability management, penetration testing, and remediation guidance.
Evaluate the security of artificial intelligence and machine learning systems, including data protection, access control, model risk, third-party dependencies, and misuse scenarios.
Assess medical devices and connected clinical technologies for cybersecurity risk and recommend compensating controls when remediation is limited.

Incident Support and Continuous Improvement

Support security incidents by providing architecture analysis, containment guidance, root-cause review, and recommendations to prevent recurrence.
Maintain current knowledge of emerging threats, security technologies, healthcare cybersecurity requirements, and industry practices.
Mentor security and information technology staff and promote consistent application of PAM Health security standards across the enterprise.

Required Qualifications

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related technical field, or an equivalent combination of education and experience.
Certified Information Systems Security Professional (CISSP) must be obtained within six (6) months of hire and maintained in good standing.
Ten (10) years of progressive experience in cybersecurity.
Seven (7) years of cybersecurity experience in healthcare, including provider, health system, or comparably regulated clinical environments.
Five (5) years in a security architecture or senior technical role.
Three (3) years of application security experience.
Experience providing technical direction to third-party security providers and managed security service providers.

Preferred Qualifications

Medical device and connected clinical device security experience.
Offensive security experience, including penetration testing, red team operations, or adversarial design review.
Applied experience securing artificial intelligence and machine learning systems.
Experience supporting HITRUST certification, SOC 2 Type II examination, ISO 27001 certification, or a comparable third-party assessment.
Experience with 42 CFR Part 2, PCI DSS, and United States Food and Drug Administration software-as-a-medical-device requirements.
Experience in geographically distributed, multi-facility clinical environments.

Education and Training

Preferred: Master’s degree in Computer Science, Cybersecurity, or a related technical field.
Preferred certifications: GIAC Defensible Security Architecture (GDSA), SABSA, Certified Cloud Security Professional (CCSP), Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), or HealthCare Information Security and Privacy Practitioner (HCISPP).

Relevant Frameworks, Guidance, and Tools

NIST Cybersecurity Framework
HIPAA Security Rule
MITRE ATT&CK
OWASP guidance, OWASP Top 10, OWASP Top 10 for Large Language Model Applications
NIST Artificial Intelligence Risk Management Framework
MITRE ATLAS
NIST
CISSP
GIAC Defensible Security Architecture (GDSA), SABSA, CCSP, OSCP, GPEN
HCISPP

Location, Travel, and Work Conditions

Location: Plano, TX (remote).
Remote position with travel up to 15 percent to facilities across the enterprise.
Facility visits occur in operating clinical environments and may require compliance with facility access, screening, and health requirements.
Work is generally performed indoors in well-lighted, well-ventilated areas, with potential exposure to hospital clinical surroundings during visits.
The position may be required to support significant security incidents outside standard business hours.

Leadership, Customer Service, and Health & Safety

Promotes cooperation, fairness, and equity; demonstrates respect, empathy, and understanding of others’ perspectives.
Coaches, evaluates, develops, and inspires staff; sets expectations and recognizes achievements.
Demonstrates accountability and sound judgment in managing company resources and adheres to company policies, procedures, and safety guidelines.
Provides the highest level of customer service through courtesy, compassion, and positive communication, while respecting dignity and confidentiality.
Works in a manner that promotes safety; participates in OSHA required training; follows universal precautions as appropriate; complies with Employee Health requirements.

Knowledge, Skills, and Abilities

Demonstrated expertise with the OWASP Top 10 and secure development practices.
Working knowledge of MITRE ATT&CK, the NIST Cybersecurity Framework, and the HIPAA Security Rule.
Ability to translate technical risk into business and clinical impact for executive and clinical audiences.
Strong written and verbal communication skills, including the ability to produce highly technical architectural documentation and present complex concepts to non-technical executive leadership.
Familiarity with OWASP Top 10 for Large Language Model Applications, NIST Artificial Intelligence Risk Management Framework, and MITRE ATLAS (preferred).
Cloud security architecture experience across multiple cloud service providers (preferred).

View full job page →

Ai Security Risk Management Cybersecurity Jobs

IAM Architect /Cybersecurity Architect

Senior Manager, Cyber Security Product Manager, AppSec

Enterprise Cybersecurity Architect

Get Ai Security Risk Management Cybersecurity Jobs alerts