Nist Ai Risk Management

Nist Ai Risk Management Cybersecurity Jobs

5 jobs found

1d ago

Senior Internal Audit Manager — Technology Risk, Cybersecurity & AI Assurance

Applied Materials Austin, TX

Austin, TX

1d ago

$140k - $193k/yr Full time Manager Senior Agentic Ai Security

Apply Now

Job Description

Lead complex technology assurance for cybersecurity, cloud, and AI risk across a global enterprise.

Responsibilities

Lead complex IT audit engagements covering infrastructure, network and endpoint security, IAM, cloud platforms and security, application controls, data protection, and resilience
Audit security across sites, laboratories, and OT environments
Own risk assessment and audit planning, including risk interviews across business and technology teams and building actionable audit plans
Shape the technology risk agenda with GIS, business, and operations partners and drive alignment with senior leadership and the IT Audit team
Run cross-functional teams with disciplined project management across GIA auditors, guest auditors, and external contractors and consultants
Direct third-party engagements, including co-sourcing, staff augmentation, and specialist providers across technology, security, and governance
Coordinate specialist activities such as penetration testing, red/purple team exercises, and targeted technical assessments
Assure AI use across the business, including agentic AI and citizen-developed tools, verifying security, controls, governance, and alignment to applicable regulations
Advance how GIA operates by applying AI across the audit lifecycle, including continuous monitoring, control automation, reporting, quality assurance, and analytics
Help deploy modern audit methodologies and tools, including agile auditing
Advise on cyber resilience, supplier cyber risk, and data governance
Provide independent assurance over major technology and platform transformation programs across all GIA pillars
Coach and develop IT audit professionals, strengthening technical depth and elevating the practice toward best-in-class

Requirements

Bachelor’s degree in Management Information Systems, Computer Science, Cybersecurity, Engineering, or a related field; master’s degree in a technical discipline preferred
10+ years of progressive experience in IT operations and infrastructure, cybersecurity, information security, technology risk, security operations, or IT audit
Experience leading complex technology audits or security and control programs
Experience leading cross-functional teams and directing third-party specialists
Big 4 or comparable technology or cyber risk experience preferred
Professional certification strongly preferred, such as CISA, CISSP, CISM, CRISC, CCSP, CGEIT, PMP, or ISACA Advanced in AI Audit (AAIA)
English

Technologies

MS Azure, AWS, GCP
Model Context Protocol (MCP) servers and gateways
Retrieval-augmented generation (RAG), agentic AI, citizen-developed tools
COBIT
NIST AI Risk Management Framework, NIST Cybersecurity Framework
ISO/IEC 42001, ISO/IEC 27001
CIS Controls, IT General Controls (ITGC), IT application controls (ITAC)
Incident response, threat and vulnerability management, security monitoring
Identity and access management, data protection, cloud identity, configuration management, workload protection
Orchestration and multi-agent workflows, third-party foundation models, RAG pipelines
AI embedded within purchased software, agent and AI inventory
Non-human identity and entitlements, shadow AI detection
Prompt injection and data exfiltration, RAG permission inheritance
Human-in-the-loop checkpoints, traceability of agent actions
Agile auditing, SOC 2

Location and Work Details

Austin, TX (onsite)
Full time
Assignee / Regular
Travel: Yes, 20% of the time
Relocation eligible: Yes

Compensation

USD 140,000 - 192,500 per year

View full job page →

16d ago

Principal Cybersecurity & Technology Risk Architect - AI/Cloud

Fannie Mae Plano, TX

Plano, TX

16d ago

$175k - $239k/yr Full time Ai Security Cloud Risk Management Cyber Risk Management

Apply Now

Job Description

Fannie Mae is seeking a Principal Cybersecurity & Technology Risk Architect - AI/Cloud to act as a first-line senior technical risk authority for enterprise architecture and AI and cloud engineering decisions. In this role, you will provide independent, evidence-based risk challenge, translate technical conditions into decision-ready risk positions, and help drive reusable risk patterns and sustainable remediation across critical technology domains.

Role Responsibilities

Lead first-line risk analysis and credible technical challenges for material architecture, AI/GenAI, agentic AI, and cloud and engineering decisions, converting technical complexity into clear enterprise risk positions and actionable outcomes.
Assess architecture and engineering risks early across security design, trust boundaries, threat scenarios, inherited controls, data flows, identity and privilege, APIs, cloud services, software supply chain risks, and resilience dependencies.
Provide senior risk challenge for AI systems and emerging AI architectures, including risks related to model and data integrity, prompt injection, sensitive data exposure, excessive agency, non-human identities, tool access, third-party models or components, and agentic workflows.
Evaluate control design and operating effectiveness using evidence, distinguishing implemented and effective controls from policies, activities, dashboards, or assertions, and flagging where evidence or assurance is insufficient.
Create reusable risk scenarios, assessment approaches, and minimum evidence expectations for established and emerging technology patterns to reduce reliance on one-off reviews and enable consistent risk decisions at scale.
Interpret threat modeling and scenario analysis to identify credible failure modes, attack paths, concentration risks, and business consequences across interconnected technology environments.
Link technical exposures to enterprise impact, including critical business services, sensitive data, operational resilience, regulatory obligations, and strategic initiatives.
Formulate decision-ready recommendations for senior management by articulating exposure, evidence, uncertainty, alternatives, conditions, accountable owners, and the specific decision required.
Identify systemic and emerging cyber risks by connecting signals across architecture reviews, risk assessments, incidents, issues, exceptions, audit findings, technology change, and industry threat intelligence.
Drive accountable remediation and sustainable risk reduction, challenging whether corrective actions address root causes and validating that closure evidence demonstrates meaningful reduction in exposure.
Partner across Cybersecurity, Technology, Engineering, Data, AI, and Risk while maintaining independence of judgment and clear accountability boundaries.
Serve as a senior technical risk integrator and mentor, improving the quality of risk reasoning, technical challenge, and executive communication across the broader risk organization.

Required Qualifications

8 years of progressively responsible experience in cybersecurity, security architecture, cloud security, AI/ML security, and related professional experience.
Bachelor’s degree (or equivalent practical experience) in cybersecurity, computer science, engineering, technology, risk, or a related discipline.
Demonstrated expertise in enterprise security architecture and modern engineering environments, including cloud architectures, APIs, identity and access patterns, data protection, application/platform security, and software supply-chain risk.
Demonstrated experience assessing AI/ML, Generative AI, or emerging technology risk, including security implications of models, data, AI applications, third-party AI services, and autonomous or agentic systems.
Experience conducting threat modeling, architecture risk assessments, control evaluations, and scenario-based risk analysis for complex technology environments.
Demonstrated ability to assess control design and operating effectiveness from technical evidence, distinguishing effectiveness from policy compliance or completion of risk-management activities.
Ability to translate technical vulnerabilities, architectural weaknesses, and control gaps into business exposure and executive-level risk decisions.
Working knowledge of relevant frameworks and practices, including NIST CSF, NIST 800-53, NIST AI RMF, NIST SSDF/SP 800-218, ISO 27001, and comparable cybersecurity and AI-risk frameworks.
Demonstrated ability to operate effectively when evidence is incomplete by articulating assumptions and uncertainty and reaching defensible conclusions without false precision.
Strong executive writing, synthesis, and presentation skills to communicate technical risk to senior technology, cybersecurity, business, and risk leaders.
Ability to provide constructive, credible challenges to senior engineers, architects, and executives while maintaining productive working relationships and supporting business mission.
Experience working within a complex, regulated enterprise with first-line ownership, independent risk oversight, and audit or assurance accountability.

Technologies and Frameworks

NIST CSF
NIST 800-53
NIST AI RMF
NIST SSDF/SP 800-218
ISO 27001

Location and Employment Details

Location: Plano, TX (onsite)
Employment Type: Full-time

Compensation

Target Salary Range: USD 175,000 - 239,000 per year
Requisition Compensation: 175,000 to 239,000

Education

Bachelor’s Level Degree (Required)
Master’s Level Degree

View full job page →

1mo ago

Senior AI & Cybersecurity Program Manager

UST Austin, TX

Austin, TX

1mo ago Closed

$88k - $132k/yr Full time Manager Senior Artificial Intelligence

This position is no longer accepting applications (closed Oct 24, 2026).

Job Description

UST is seeking a Senior AI & Cybersecurity Program Manager to lead enterprise-wide AI and cybersecurity programs across planning, governance, execution, and executive reporting.

Responsibilities

Lead and manage complex enterprise programs spanning AI, cybersecurity, IT, and technology from planning through successful execution
Drive AI/GenAI adoption, including enterprise AI rollout, Microsoft Copilot, emerging technology programs, and associated governance activities
Build and maintain program plans covering milestones, dependencies, budgets, risks, issues, and action items
Establish and operate program governance frameworks, processes, and operating models
Coordinate cross-functional stakeholders across Cybersecurity, IT, Legal, Privacy, Compliance, Procurement, and business teams
Lead vendor evaluations, technology assessments, and proofs of concept (POCs) through implementation activities
Manage budgets, resource planning, vendor coordination, and ongoing financial tracking
Create and deliver executive-level materials including presentations, status reports, dashboards, and program updates
Identify and manage program risks, dependencies, and issues, including mitigation planning
Drive accountability across project teams to support timely completion of key deliverables

Requirements

10+ years of Program Management experience leading complex cybersecurity, IT, or technology initiatives
2+ years of exposure to AI, GenAI, Copilot, AI governance, or emerging technology programs
Proven experience managing cross-functional stakeholders across Security, IT, Legal, Privacy, Compliance, Procurement, and business teams
Strong background managing vendor evaluations, POCs, budgeting, executive reporting, and governance programs
Experience building and running security awareness, change management, and adoption programs at enterprise scale
Ability to operate independently, manage risk and accountability, and communicate effectively with executives and technical teams
Nice to Have: Cybersecurity background (AI Security, Cloud Security, Privacy, GRC, Risk Management)
Nice to Have: Experience with AI governance frameworks, Responsible AI, NIST AI RMF, or enterprise AI adoption programs
Nice to Have: PMP, PgMP, CISSP, CISM, or similar certifications

Technologies

Microsoft Copilot
NIST AI RMF

Compensation

$88,000-$132,000 per year

Benefits

10 days of paid vacation per year (minimum)
6 days of paid sick leave each year (pro-rated for new hires throughout the year)
10 paid holidays
Paid bereavement leave and jury duty
401(k) Retirement Plan with employer matching
Medical, dental, and vision insurance (employees and eligible dependents residing in the US)
Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits
Ability to purchase additional voluntary short-term disability benefits
Health Savings Account (HSA) participation
Flexible Spending Account (FSA) participation (healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines)

Location

Austin, TX (onsite)

What We Believe

Humility
Humanity
Integrity

Skills

AI Governance
Project Management
Stakeholder Management
Cybersecurity

View full job page →

1mo ago

AI Cybersecurity Engineer

Agilent Technologies Inc Colorado Springs, CO

Colorado Springs, CO

1mo ago Closed

$139k - $218k/yr Full time Ai Security Application Security Cloud Ai Security

This position is no longer accepting applications (closed Oct 22, 2026).

Job Description

Agilent Technologies, Inc is hiring an AI Cybersecurity Engineer in Colorado Springs, CO (onsite). In this role, you enable the secure adoption of AI across the organization by partnering with business, IT, product teams, and ISRM to design, develop, deploy, and operate AI solutions with appropriate security and governance. The position offers a $139,440 - $217,875 yearly pay range, with eligibility for bonus, stock, and benefits.

What you’ll do

Partner with IT, business functions, and product teams to support secure development and deployment of AI solutions.
Assist with security assessments and risk reviews for commercial AI platforms, AI-enabled products, generative AI solutions, machine learning models, and internally developed AI capabilities.
Support short-term, mid-term, and long-term AI security initiatives and projects across Agilent.
Collaborate with enterprise architects, cloud teams, engineering teams, and security specialists to integrate security controls into AI solutions.
Participate in threat modeling, architecture reviews, design discussions, and security assessments for AI-enabled systems.
Evaluate emerging AI technologies, evolving threat landscapes, and AI security capabilities to inform next steps.
Help define and mature Agilent’s long-term AI security strategy, governance framework, and security roadmap.
Coordinate with Legal, Privacy, Compliance, Risk Management, Product Security, and Enterprise Security to ensure AI solutions align with applicable requirements and standards.
Develop security recommendations for AI data protection, model security, identity management, access controls, model governance, and third-party risk.
Act as a secure AI evangelist by promoting awareness, education, and adoption of secure AI development practices.
Contribute to executive presentations, strategy discussions, standards development, and governance forums related to AI security.

What you bring

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, Data Science, or a related field.
8+ years of experience in cybersecurity, information security, cloud security, application security, security engineering, or related disciplines.
3+ years of experience supporting AI, machine learning, data science, automation, or emerging technology initiatives.
Strong understanding of cybersecurity principles.
Experience evaluating security risks tied to commercial SaaS platforms, cloud services, and emerging technologies.
Knowledge of cybersecurity frameworks, security controls, and industry best practices.
Strong communication and stakeholder management skills across technical and non-technical audiences.
Ability to translate complex cybersecurity and AI-related risks into practical business recommendations.

Preferred qualifications

Experience securing generative AI platforms, machine learning environments, AI agents, copilots, and AI-enabled applications.
Experience reviewing or implementing AI governance programs, responsible AI frameworks, or AI risk management processes.
Familiarity with AI threat modeling, model security, prompt injection risks, data leakage protections, model integrity, and AI supply chain security.
Experience with Azure AI Services, OpenAI, Microsoft Copilot, AWS AI services, Google Vertex AI, or similar platforms.
Knowledge of NIST AI Risk Management Framework (AI RMF), NIST Cybersecurity Framework (CSF), ISO 27001, OWASP Top 10 for LLM Applications, and related standards.
Experience in regulated industries such as life sciences, healthcare, medical devices, software, or manufacturing.
Professional certifications such as CISSP, CCSP, CISM, GIAC, Microsoft Security certifications, AI-related certifications, or equivalent.

Tools and standards you may work with

Azure AI Services, OpenAI, Microsoft Copilot, AWS AI services, Google Vertex AI
NIST AI Risk Management Framework (AI RMF), NIST Cybersecurity Framework (CSF), ISO 27001
OWASP Top 10 for LLM Applications
CISSP, CCSP, CISM, GIAC

Schedule, travel, and application details

Full time weekly schedule, day shift
Travel required: 10% of the time
Duration: No end date
Applications accepted until at least September 28, 2026, or until the job is no longer posted
Job function: IT

View full job page →

1mo ago

AVP-Cybersecurity Engineer (AI Security)

Moody's Charlotte, NC

Charlotte, NC

1mo ago Closed

$140k - $231k/yr Full time Agentic Ai Security AI Ai Security

This position is no longer accepting applications (closed Oct 18, 2026).

Job Description

Moody’s is building security for the way organizations use AI today, and the Cybersecurity Engineering team plays a central role in safeguarding AI and cloud ecosystems. This onsite role in Charlotte, NC supports secure, compliant adoption of AI technologies by pairing an AI-focused security roadmap with practical governance and architecture across the enterprise.

Salary: USD 140,200 - 230,900 per year. Compensation: Incentive compensation eligibility.

Responsibilities

Develop and own a multi-year AI security strategy and roadmap for securely leveraging Azure AI services, including Azure OpenAI and Azure Machine Learning
Define and enforce enterprise AI security policies and control frameworks aligned with best practices and regulatory mandates, including the NIST AI Risk Management Framework
Architect secure AI and ML environments in Azure, AWS, or GCP, covering data segmentation, network controls, and identity and access management using tools such as Azure Policy and Key Vault
Establish security frameworks for Agentic AI systems, including secure deployment of Model Context Protocol servers
Provide risk reporting to the Chief Information Security Officer, executive leadership, and the Board on AI security posture and compliance with emerging regulations
Collaborate with engineering, legal, and compliance to embed security early and enable secure adoption of AI technologies
Drive innovation by challenging existing processes, proposing solutions, and contributing to secure business enablement

Requirements

5–7 years of experience in cybersecurity engineering, with a focus on AI and cloud security
Deep understanding of Azure or AWS cloud architecture and AI security principles
Expertise designing and implementing security controls for AI/ML systems and Azure or AWS environments, with a proven ability to reduce vulnerabilities through proactive control implementation
Strong analytical and problem-solving skills demonstrated by resolving complex security incidents within SLA and leading cross-functional risk assessments
Ability to mentor teams across the organization in AI security best practices
Relevant certifications in Azure Security and AI Security strongly desired
Deep expertise in artificial intelligence, including a track record of implementing advanced AI solutions and leading innovation initiatives using AI tools, with demonstrated leadership in managing AI-related risks and ensuring ethical governance and responsible AI adoption
Bachelor’s degree in Computer Science, Information Security, or related field

Benefits

Incentive compensation eligibility
Medical, dental, vision
Parental leave
Paid time off
401(k) plan with employee and company contribution opportunities
Life, disability, and accident insurance
Discounted employee stock purchase plan
Tuition reimbursement

Technologies

Azure, AWS, GCP
Azure OpenAI, Azure Machine Learning
Azure Policy, Key Vault
NIST AI Risk Management Framework
Model Context Protocol

About the Team

The Cybersecurity Engineering team is responsible for safeguarding Moody’s AI and cloud ecosystems by implementing cutting-edge security strategies and frameworks. By joining the team, you will help secure enterprise AI adoption using Microsoft Azure capabilities while ensuring compliance and ethical governance, with the opportunity to lead innovation in AI security and shape secure AI-driven transformation.

View full job page →

Nist Ai Risk Management Cybersecurity Jobs

Senior Internal Audit Manager — Technology Risk, Cybersecurity & AI Assurance

Principal Cybersecurity & Technology Risk Architect - AI/Cloud

Senior AI & Cybersecurity Program Manager

AI Cybersecurity Engineer

AVP-Cybersecurity Engineer (AI Security)

Get Nist Ai Risk Management Cybersecurity Jobs alerts