Manager, AI Assurance & Governance, Cyber Advisory

About the role

Kroll’s Cyber Risk team works on over 3,000 cases a year, including some of the most complex and highest profile matters in the world. With experts based around the world, supported by ground-breaking technology, we help protect our clients’ data, people, operations, and reputation with innovative assessments, investigations, and intelligence. We are the only company in the world with the expertise and resources to deliver global, end-to-end cyber risk management, supporting organizations through every step of their journey toward cyber resilience.

We are looking for bright, inquisitive minds who are experienced in and passionate about Artificial Intelligence/Machine Learning and its place within cybersecurity consulting and advisory services. Our Advisory team responds to our clients’ needs and provides leadership and strategic guidance when and where it is needed the most.

Responsibilities

• Support the delivery of high-quality cybersecurity consulting advice and services to a portfolio of clients of varying size, scope, and complexity.
• Design and implement enterprise AI Governance programs, operating models, policies, standards, and controls, including processes for Agentic AI, GenAI, ML, and autonomous decision-making solutions.
• Contribute to building and enhancing AI capabilities, service delivery collaboration, methodology development, and AI Risk/Security knowledge base.
• Conduct AI Risk Assessments across internally developed, procured, and third-party AI systems.
• Advise clients on establishing AI governance committees, decision-making structures, and accountability frameworks.
• Support development of AI inventories, use-case classification methodologies, and risk tiering approaches.
• Assess client readiness against frameworks such as NIST AI RMF, EU AI Act, ISO 42001, OECD AI Principles, and emerging regulatory requirements.
• Support organizations in implementing practical guardrails around AI adoption balancing innovation, risk management, and regulatory compliance.
• Perform AI Assurance reviews to evaluate effectiveness of AI governance, controls, security, and oversight mechanisms.
• Conduct AI Security and Assurance assessments including model security reviews, adversarial testing, LLM security assessments, and evaluation of AI control effectiveness.
• Collaborate with offensive security and engineering teams to validate AI security controls through targeted testing and technical assessments of AI systems against emerging threats including prompt injection, model manipulation, training data poisoning, insecure plugins, excessive agency, data leakage, and supply-chain compromise.
• Support AI-related elements of services including Secure Model Development, Data Security, Application Development, Third Party and Supply Chain Security, and Security Testing.
• Work closely with clients’ governance, security, and IT teams to understand their requirements and guide implementation of technologies and processes.
• Research advances in AI/ML development, such as Agentic AI, Multimodal AI, Reasoning Models, AI Security and Governance, AI in Software Engineering, the AI regulatory landscape (EU AI Act, US SEC AI Compliance Plan, etc.), and AI/ML governance and security frameworks (ISO/IEC 42001, NIST AI RMF, OWASP Top 10 for LLM Applications, OECD AI Principles, etc.).
• Continually monitor changes and developments across global and regional tech and cyber regulation and legislation, as well as the wider cyber threat landscape to ensure services and clients are kept abreast of the ever-evolving threats, new controls, and requirements.
• Review and uplift relevant frameworks, policies, and procedures and provide practical advice to support the operation of new processes.
• Effectively communicate findings, reports, training, and strategies to technical staff, executive leadership, legal counsel, and both internal and external clients.
• Support the development of proposals and statements of work for Kroll clients.
• Work with sales and marketing teams to support the development of new business opportunities.

Requirements

• Excellent interpersonal skills, drive, enthusiasm, and a passion for security.
• Strong knowledge of AI governance, risk, and security frameworks and standards including NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLM Applications, OWASP GenAI Security Project, CSA AI Security Maturity Model, CSA AI Controls Matrix, MITRE ATLAS, OECD AI Principles, and emerging AI regulatory requirements such as the EU AI Act and US regulatory guidance.
• Experience conducting AI risk assessments, AI control reviews, model governance assessments, or AI compliance evaluations across enterprise environments.
• Strong understanding of Responsible AI principles, including transparency, explainability, human oversight, accountability, fairness, and model governance.
• Experience advising executive leadership, risk committees, governance boards, or regulators on AI-related risks, controls, and adoption strategies.
• Knowledge of enterprise AI technologies including Generative AI, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI Agents, and autonomous systems.
• Experience developing AI policies, standards, governance procedures, operating models, and risk management frameworks.
• Understanding of core security controls, e.g., network security, IAM, cryptography, SSDLC, cloud security, security testing, etc.
• Technical acumen in tools such as Excel, Tableau, Power BI, and/or SQL, to empower teams to extract actionable insights and drive informed decision-making.
• Good knowledge of the security and AI threat landscape, control frameworks, and cyber resilience strategies.
• Enjoys solving problems and designing solutions/capabilities leveraging people, processes, and technologies.
• Strong written and verbal communication and presentation skills, teamwork, and client relationship skills.
• Experience in high-quality delivery to tight timescales.
• A critical thinker and problem solver with attention to detail and adaptability.
• Outstanding organizational skills. Ability to multi-task, prioritize, and manage time effectively.
• Experience working with diverse teams.

Preferred Experience

• Experience with Microsoft Copilot, Azure AI Foundry, OpenAI, Anthropic Claude, AWS Bedrock, Google Gemini, Databricks, or similar enterprise AI platforms.
• Experience evaluating third-party AI solutions, AI vendor risk, model risk management, or AI procurement governance.
• Familiarity with AI governance and assurance platforms e.g., Credo AI, Holistic AI, ModelOp, IBM watsonx Governance, or equivalent technologies.
• Industry experience supporting financial services, healthcare, technology, energy, public sector, or other regulated industries.
• Relevant certifications such as CISSP, CISM, CRISC, ISO 42001 Lead Implementer/Auditor, CGRC, PMP, or equivalent professional qualifications.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore, and maximize our clients’ value? Your journey begins with Kroll.

Benefits

• Healthcare Coverage: Comprehensive medical, dental, and vision plans.
• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.
• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.
• Compensation and Rewards: Competitive salary structures, performance-based incentives, and merit-based compensation reviews.
• Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department, and role.

Pay

The current salary range for this position is $150,000 to $175,000.