AI Security & Automation Lead

You will own the firm's entire AI strategy in both directions: building the internal automation that makes our delivery team faster and better and building the client-facing AI security service lines (AI governance assessments and AI red-teaming) that don't exist in our portfolio today. You'll be the internal specialist whose full-time job is AI — not a mandate handed to already-stretched analysts. KeyResponsibilities • Internal tooling: Design and deploy AI-assisted workflows for reconnaissance, vulnerability prioritization, SOC alert triage/correlation, and draft report generation, with human validation built into every step. • New service line — AI Governance & Risk Assessment: Build and deliver assessments against ISO/IEC 42001, the NIST AI Risk Management Framework, and EU AI Act risk-classification requirements for clients deploying AI systems. • New service line — AI Red-Teaming: Design and run adversarial testing of client-deployed LLM systems and AI agents — prompt injection, data leakage, jailbreak resistance, and agentic-workflow abuse cases. • Act as the internal champion and trainer for AI adoption across the delivery team — running hands-on enablement, not just issuing directives. • Stay current on the fast-moving AI security threat and regulatory landscape and translate it into practical firm capability and client-facing offers. • Partner with the Head of Security Operations & Delivery to ensure automation actually reduces delivery time and error rate, not just adds tooling overhead. RequiredQualifications • 3–6 years in cybersecurity (pentesting, security engineering, or SOC), with substantial hands-on experience applying AI/ML or LLM tooling to security workflows. • Working understanding of at least one AI governance framework (ISO/IEC 42001, NIST AI RMF, or EU AI Act) — or demonstrated ability to get there fast. • Practical experience with LLM application security concepts (prompt injection, jailbreaks, RAG/data-leakage risks, agent security). • Comfortable building and shipping automation/scripts/tooling, not just using off-the-shelf products. • Strong communicator — this role trains colleagues and pitches new services to clients. Preferred • Prior experience standing up a new service line or product inside a consulting/services business. • A certification or credential relevant to AI governance (e.g., ISO 42001 Lead Implementer) or a track record of self-directed learning in the space. • Familiarity with SOAR platforms or security automation frameworks.