Cloud Artificial Intelligence Security Lead

Job Purpose

This role at Arbitration Forums is as unique as it is rewarding because of the AF IPAAL Values (Integrity, Passion, Accountability, Achievement, Leadership) and TRI Model (Trust, Respect, Inclusion). The Artificial Intelligence Security Lead is a dynamic, empathetic, and action-oriented individual who plays a crucial role in ensuring that our AI products and solutions uphold the highest standards of security and compliance.

About the Role

The Artificial Intelligence Security Lead is accountable for the definition and implementation of security design patterns for cloud-based security services, ensuring that the AI cloud security framework is optimized to support the life cycle of AF’s AI-powered solutions. The role also focuses on creating execution strategies that focus on embedding security controls into AI models and solution designs, building practices for a proactive rather than reactive focus, and staying ahead of emerging cybersecurity threats.

Essential Duties and Responsibilities

• Collaborate with the Data Governance Lead and Compliance SMEs to define and implement the operational procedures for data cataloging and lineage harvesting and plotting, with a focus on ensuring data utilization is secured and compliant with AF’s policies.
• Develop and implement policy-driven data protection best practices to ensure AI cloud solutions are protected from data loss.
• Collaborate closely with data scientists, GenAI specialists, and developers, and MLOps engineers to identify potential security vulnerabilities, implement best practices, and ensure compliance with regulatory standards including NIST, SOC 2, and others.
• Lead security assessments, coordinate penetration testing, and ensure vulnerability management for AI systems to proactively mitigate risks.
• Support Data Governance by acting as the security expert throughout the designing, developing, and deploying of secure AI and machine learning applications, with a focus on safeguarding personally identifiable information (PII).
• Stay ahead of emerging cybersecurity threats, privacy regulations, and compliance requirements to ensure that our AI solutions continuously meet and exceed market standards.
• Document security protocols, conduct training sessions, and promote security awareness within the team and organization.
• Engage with stakeholders across multiple disciplines to refine security policies and procedures specific to AI and ML products.
• Design, implement, and execute test approaches to GenAI to identify security flaws, particularly those impacting confidentiality, integrity, or availability of information.
• Partner with Quality Assurance department on the creation, implementation, and execution of test plans and strategies for evaluating the compliance of AI systems, including defining test objectives, selecting suitable testing methods, and identifying test scenarios.
• Support the documentation of test methods, results, and suggestions in clear and brief reports to stakeholders.
• Perform security assessments including creating, updating, and maintaining threat models and security integration of Gen AI platforms.
• Implement/configure security controls on AI technologies.
• Discuss AI/ML concepts proficiently with data science and ML teams to identify and develop solutions for security issues.
• Support the identification and documentation of defects, irregularities, or inconsistencies in AI systems, working closely with quality assurance, data scientists, GenAI engineers, and AI developers to rectify and resolve them.
• Support Enterprise Risk Management in the assessment of AI systems for ethical considerations and potential biases to make sure they follow ethical standards and encourage inclusivity and diversity.
• Design and implement mitigations, detections, and protections to enhance the security and reliability of AI systems.
• Perform model input and output security including prompt injection and security assurance.
• Aid in the evaluation, selection, and secure configuration of AI/ML tools, libraries, and platforms to empower AF’s teams while maintaining a robust security posture.
• Assist in the development and maintenance of a curated portfolio of approved AI tools and services that align with AF’s security standards and business objectives.
• Assist in incident response, threat modeling, and security architecture reviews as needed.

Qualifications

• Bachelor's degree in computer science, electrical or computer engineering, statistics, econometrics, or related field, or equivalent work experience.
• 10+ years of hands-on experience in cybersecurity or information security.
• 4+ years of experience with Natural Language Processing (NLP) and Large Language Models (LLM).
• 4+ years of experience working in Microsoft Azure cloud environments (e.g. Azure Cloud Services, Azure Fabric, Azure Data Factory, Purview Data Governance), as well as Azure AI services, as well as data cataloging practices.
• Familiarity with AI testing frameworks and tools such as TensorFlow, PyTorch, or Kerns.
• Deep understanding of Machine Learning lifecycles and MLOps.
• Deep understanding of the security challenges and controls for Large Language Models (LLMs), including prompt injections, data poisoning, and model theft.
• Demonstrated proficiency with AI/ML fundamental concepts and technologies including ML, deep learning, NLP, and computer vision.
• Experience assessing AI systems for ethical considerations and potential biases to make sure they follow ethical standards and encourage inclusivity and diversity.

Core Competencies and Skills

• Security Products & Services: Ability to work independently to learn new technologies, methods, processes, frameworks/platforms, and systems; stay updated on the latest developments, trends, and best practices in artificial intelligence; collaborate with data engineers, data governance leads, and AI teams to ensure the quality, consistency, and relevance of data used for training and testing AI models (includes collecting, preprocessing, and validating data).

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is occasionally required to stand; walk; sit; use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; climb stairs; balance; stoop, kneel, crouch, or crawl; talk or hear; taste or smell. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.