Security Consultant

Job summary

Lead end-to-end AI and GenAI security assessment engagements, evaluating platforms, applications, model lifecycle controls, cloud infrastructure, threats, and compliance with relevant frameworks. Deliver gap analyses, risk ratings, remediation recommendations, executive reports, and strategic guidance while managing project governance and stakeholder communications.

Job details

Job Description: GenAI Security and NIST Framework Consultant Location: Toronto, ON – Hybrid (2–3 days Work From Office) Duration: 6–12 Months Experience: 10+ Years, Required Cybersecurity Experience: 8+ Years (Must have) Role Overview We are seeking a Security GenAI Security and NIST Framework Consultant to lead AI security assessments, evaluate AI/GenAI security risks, and provide strategic guidance on AI governance, risk, and compliance. Key Responsibilities Lead end-to-end AI security assessment engagements, including planning, execution, reporting, and stakeholder management. Conduct AI/GenAI security, governance, risk, and compliance assessments. Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders. Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure. Perform AI threat modeling and identify risks such as prompt injection, data leakage, model abuse, and supply chain vulnerabilities. Evaluate controls against NIST AI RMF, ISO 42001, OWASP LLM Top 10, and organizational security requirements. Develop gap analyses, risk ratings, remediation recommendations, and maturity assessments. Create executive-ready assessment reports, roadmaps, and presentation materials. Provide strategic guidance on secure AI adoption, governance, and operationalization. Manage project governance, timelines, risks, issues, and customer communications. Technical Skills: AI Security and Generative AI Security Large Language Models (LLMs) and AI/ML Security AI Governance and Responsible AI NIST AI RMF, MITRE ATLAS, and AI Threat Modeling Microsoft Copilot and Azure OpenAI Security Security Compliance and Regulatory Frameworks Stakeholder Management and Workshop Facilitation Required Experience and Qualifications 8+ years of experience in cybersecurity delivery. Experience leading enterprise security assessments and advisory engagements. Hands-on experience with AI/GenAI, cloud security, and governance frameworks. Strong executive communication and client-facing consulting skills.

What you’ll do

Lead end-to-end AI and GenAI security assessment engagements, evaluating platforms, applications, model lifecycle controls, cloud infrastructure, threats, and compliance with relevant frameworks. Deliver gap analyses, risk ratings, remediation recommendations, executive reports, and strategic guidance while managing project governance and stakeholder communications.

Requirements

Requires 10+ years of overall experience and at least 8 years of cybersecurity delivery experience, including leadership of enterprise security assessments and advisory engagements. Candidates must have hands-on experience with AI/GenAI, cloud security, and governance frameworks, along with strong executive communication and client-facing consulting skills.

Listed skills

• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• AI Security
• Generative AI Security
• Large Language Models
• AI/ML Security
• AI Governance
• Responsible AI
• NIST AI Risk Management Framework
• MITRE ATLAS
• AI Threat Modeling
• Microsoft Copilot
• Azure OpenAI Security
• Cloud Security
• Security Assessments
• Risk and Compliance
• Stakeholder Management
• Workshop Facilitation

Job areas

• Security & Safety
• Technology
• Consulting

More jobs from IMCS Group