Security Gen AI Security and NIST Framework Consultant

Position: Security Gen AI Security and NIST Framework Consultant

Type: Contract

Start Date: 10/31/2026

Duration: 6-12 Months

Location: Toronto, ON (Hybrid, 2 to 3 days onsite)

Security Consultant responsible for leading AI/GenAI security assessments, governance reviews, risk evaluations, and compliance initiatives while establishing secure AI adoption practices aligned with NIST AI RMF, ISO 42001, and enterprise security standards.

MANDATORY SKILLS

• 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
• Proven experience leading enterprise security assessments and advisory engagements.
• Strong expertise in: AI Security, Generative AI Security, AI Governance, Responsible AI
• AI Risk Management
• Deep understanding of: Large Language Models (LLMs), AI/ML Security, Prompt Security, Model Security
• Experience with: NIST AI RMF, MITRE ATLAS

KEY RESPONSIBILITIES

• Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
• Conduct AI and Generative AI security, governance, risk, and compliance assessments.
• Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
• Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
• Perform AI threat modeling and identify risks such as:
• Prompt Injection
• Data Leakage
• Model Abuse
• Supply Chain Vulnerabilities
• Evaluate controls against:
• NIST AI Risk Management Framework (AI RMF)
• ISO 42001
• OWASP LLM Top 10
• Enterprise Security Standards
• Develop gap assessments, risk ratings, maturity assessments, and remediation roadmaps.
• Create executive-level reports, presentation materials, and security recommendations.
• Provide strategic guidance for secure AI adoption, governance, and operationalization.
• Manage project governance, timelines, risks, issues, and stakeholder communications.
• Support AI security program development and responsible AI initiatives.

KEY SKILLS

• Artificial Intelligence (AI)
• Generative AI
• AI Security
• GenAI Security
• Large Language Models (LLMs)
• AI Governance
• Responsible AI
• NIST AI RMF
• ISO 42001
• MITRE ATLAS
• OWASP LLM Top 10
• Threat Modeling
• Microsoft Copilot Security
• Azure OpenAI
• Cloud Security
• Risk Management
• Security Assessments
• Compliance
• Cybersecurity
• Stakeholder Management
• Security Consulting
• Executive Reporting

CORE QUALIFICATIONS

• 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
• Proven experience leading enterprise security assessments and advisory engagements.
• Strong expertise in: AI Security, Generative AI Security, AI Governance, Responsible AI
• AI Risk Management
• Deep understanding of: Large Language Models (LLMs), AI/ML Security, Prompt Security, Model Security
• Experience with: NIST AI RMF, MITRE ATLAS
• AI Threat Modeling
• Security Risk Assessments
• Experience assessing cloud-based AI services and AI-enabled applications.
• Strong knowledge of Microsoft Copilot and Azure OpenAI security controls.
• Experience with security compliance, governance, and regulatory frameworks.
• Strong stakeholder management, workshop facilitation, and consulting skills.
• Excellent executive communication and presentation skills.

PREFERRED QUALIFICATIONS

• Experience implementing AI governance frameworks within large enterprises.
• Experience supporting Microsoft Copilot, Azure OpenAI, or enterprise GenAI initiatives.
• Knowledge of ISO 42001 and emerging AI regulations.
• Experience working with cloud security architectures across Azure, AWS, and GCP.
• Experience building AI security roadmaps and maturity improvement programs.
• Relevant cybersecurity certifications such as CISSP, CCSP, CISM, or equivalent.