AI Implementation & Governance Consultant

Software Guidance & Assistance, Inc., (SGA), is searching for an AI Implementation & Governance Consultant for a hybrid contract assignment with one of our sports clients in Orlando, FL. Hybrid requirement: in-office 3 days per week for the initial few months. Potential to be adjusted. Initial contract length 3 months with excellent likelihood to go 12 months depending on project needs & performance. Must be local to the ORL area, relocation candidates will not be considered at this time. Position Summary: We are seeking an AI Implementation & Governance Consultant to lead the secure integration of Artificial Intelligence tools across our organization. You will be responsible for deploying AI solutions, managing back-end configurations, and acting as the primary gatekeeper for data privacy and security. You will ensure that all AI usage whether through third-party enterprise platforms, APIs, or internal tools strictly adheres to our corporate security policies and compliance frameworks. Key Responsibilities Implementation & Architecture Lead the rollout of enterprise AI tools (e.g., Claude Enterprise, Google Gemini) to internal teams.Configure and manage AI backend infrastructure, including API gateways, cloud environments (AWS/Azure/GCP), and vector databases for internal AI search.Work with department heads to identify safe, high-ROI use cases for AI automation and generative AI. Security & Governance Contribute to and enforce AI Acceptable Use Policies and data handling guidelines.Configure Role-Based Access Control (RBAC) and Data Loss Prevention (DLP) protocols to prevent sensitive company data from leaking into public AI models.Implement Open Telemetry Protocol (OTLP) collectors and monitoring as well as evaluate inference hooks and other AI-centric security tools.Monitor API usage and prompt logs for security vulnerabilities, including prompt injection attacks or unauthorized data access.Ensure all AI deployments comply with industry standards (e.g., ISO 42001, NIST AI RMF, GDPR, HIPAA) and internal IP protection rules.Assist with Information Security tasks/projects such as adjusting privacy settings on AI and Google Workspace platforms. Assist in monitoring rules/policies within these and other systems. Design and execute AI Incident Response Playbooks for handling prompt injection, data leakage, and unintended agent execution. Training & Development In partnership with Human Resources, design and deliver comprehensive training programs for staff on the safe and effective use of AI coding tools, AI agents, and generative AI assistants.Develop and lead training on "Secure Scripting in Google Apps Script," focusing on preventing over-privileged scripts, data leakage, and unauthorized external requests.Monitor and detect Shadow AI to control and block unvetted AI domains and API calls as well as train staff on allowed AI usage. Assist in evaluating, establishing, and maintaining corporate AI Acceptable Use Policies. Vendor & Systems Management Evaluate third-party AI vendors for security posture, data retention policies, and model training opt-outs.Audit current vendors as well as their sub-processors for unvetted AI supply chain risk and AI feature creep. Audit model supply chains, data provenance, and dataset scrubbing pipelines prior to integration with vector databases or internal RAG models.Manage API key lifecycles, rate limiting, and cost-control guardrails to prevent budget overruns. Maintain the integration between our internal databases and AI tools, ensuring secure authentication. Qualifications 3+ years of experience in IT Systems Administration, Cloud Architecture, or Cybersecurity.Hands-on experience configuring enterprise cloud environments and managing API integrations.Strong understanding of Large Language Models (LLMs), AI infrastructure, and the specific security risks associated with Generative AI.Familiarity with data compliance frameworks and implementing DLP (Data Loss Prevention) controls.Ability to translate complex technical and security concepts to non-technical stakeholders.