Cyber Security Consultant
- Toronto, ON, Canada
$70 CAD / hour · Contract
Applications open in a new tab.
Job details
- Pay
- $70 CAD / hour
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Role: SailPoint Developer (Security GenAI Security and NIST Framework Consultant)
Location: Toronto, ON – Hybrid (2–3 days working from office)
Hiring Mode: Contract (6–12 months initially)
Pay: CAD up-to 70/hr.
Skill: Artificial Intelligence (AI)
Experience Required: 10+ years
Role Description:
We are seeking an experienced Security GenAI Security and NIST Framework Consultant to lead enterprise AI security assessments, evaluate governance and compliance controls, and provide strategic guidance on secure AI adoption.
Key Responsibilities:
- Lead end-to-end AI security assessment engagements, including planning, execution, reporting, and stakeholder management.
- Conduct AI/GenAI security, governance, risk, and compliance assessments.
- Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
- Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
- Perform AI threat modeling and identify risks such as prompt injection, data leakage, model abuse, and supply chain vulnerabilities.
- Evaluate security controls against NIST AI Risk Management Framework (AI RMF), ISO 42001, OWASP LLM Top 10, and organizational security requirements.
- Develop gap analyses, risk ratings, remediation recommendations, and maturity assessments.
- Prepare executive-ready assessment reports, roadmaps, and presentations.
- Provide strategic guidance on secure AI adoption, governance, and operationalization.
- Manage project governance, timelines, risks, issues, and customer communications.
Technical Skills:
- AI Security and Generative AI Security
- Large Language Models (LLMs) and AI/ML Security
- AI Governance and Responsible AI
- NIST AI RMF, MITRE ATLAS, and AI Threat Modeling
- Microsoft Copilot and Azure OpenAI Security
- Security Compliance and Regulatory Frameworks
- Cloud Security
- Stakeholder Management and Workshop Facilitation
Required Experience and Qualifications:
- 10+ years of overall professional experience.
- At least 8 years of experience in cybersecurity delivery.
- Proven experience leading enterprise security assessments and advisory engagements.
- Hands-on experience with AI/GenAI security, cloud security, and governance frameworks.
- Strong executive communication, stakeholder management, and client-facing consulting skills.
More about this job
Responsibilities
Lead enterprise AI and GenAI security assessments, including stakeholder workshops, threat modeling, control evaluations, risk analysis, and executive reporting. Provide strategic guidance on secure AI adoption and governance while managing project timelines, risks, issues, and client communications.
Requirements
Requires 10+ years of professional experience, including at least 8 years in cybersecurity delivery, and a track record leading enterprise security assessments and advisory engagements. Candidates need hands-on AI/GenAI security, cloud security, and governance framework experience, along with strong executive communication and client-facing consulting skills.
Skills
- AI Security
- Generative AI Security
- Large Language Models
- AI/ML Security
- AI Governance
- Responsible AI
- NIST AI Risk Management Framework
- MITRE ATLAS
- AI Threat Modeling
- Microsoft Copilot
- Azure OpenAI Security
- Cloud Security
- Security Compliance
- Stakeholder Management
- Workshop Facilitation
- Executive Communication
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
Keywords
- Artificial Intelligence
- Generative AI
- Large Language Models
- AI/ML Security
- AI Governance
- Responsible AI
- NIST AI Risk Management Framework
- ISO 42001
- OWASP LLM Top 10
- MITRE ATLAS
- AI Threat Modeling
- Microsoft Copilot
- Azure OpenAI
- Cloud Security
- Prompt Injection
- Data Leakage
- Model Abuse
- Supply Chain Vulnerabilities
- Security Assessments
- Governance, Risk, and Compliance
- Model Lifecycle Controls
- Risk Ratings
- Gap Analysis
- Maturity Assessments
- Remediation Recommendations
- Enterprise Security
- Stakeholder Management
- Workshop Facilitation
- Executive Reporting
- Project Governance