Senior Information Security Analyst – Agentic AI

About the role

This senior-level role involves leading the design, implementation, and oversight of identity governance controls for autonomous and semi‑autonomous AI agents operating within enterprise systems. The position focuses on establishing governance frameworks that treat AI agents as non‑human identities, ensuring compliance with security standards, risk management protocols, and regulatory requirements. The role requires a strategic thinker with strong expertise in identity management and AI security governance.

Responsibilities

• Develop and maintain identity governance standards and policies specific to AI agents, including registration, classification, ownership, and lifecycle management.
• Establish access control models based on least privilege, segregation of duties, and policy‑based authorization for AI‑enabled systems.
• Collaborate with cybersecurity, IAM, AI engineering, compliance, and legal teams to ensure AI agents function within approved enterprise guardrails.
• Design governance processes for onboarding, credential issuance, privileges management, access reviews, decommissioning, and emergency actions related to AI agents.
• Assess risks associated with autonomous AI activities, including tool use, decision‑making, privileged operations, and memory management.
• Implement monitoring, logging, and audit controls to ensure AI agent actions are traceable, attributable, and reviewable by appropriate human oversight.
• Support the development of policies for human‑in‑the‑loop oversight, escalation procedures, and exception handling specific to AI systems.
• Conduct periodic reviews such as access certifications, control testing, and maturity assessments of AI identity governance controls.
• Contribute to threat modeling to identify and mitigate risks including identity misuse, privilege escalation, credential compromise, and policy violations.
• Prepare high‑level reports for executives on the effectiveness of identity controls, residual risks, and compliance status related to AI agents.

Qualifications

• 5+ years of experience in information security, identity and access management, risk management, or cybersecurity roles.
• Proven expertise in identity governance and administration, privileged access management, and access lifecycle management.
• Experience designing or operating controls for non‑human identities, machine identities, APIs, automation platforms, or AI‑enabled systems.
• Strong knowledge of Zero Trust principles, least‑privilege access, and enterprise security architecture.
• Experience with risk assessment, audit processes, compliance standards, and security documentation.
• Ability to translate emerging technology risks into actionable governance policies and procedures.
• Excellent stakeholder management, problem‑solving skills, and clear written communication abilities.
• Familiarity with AI governance, model risk, responsible AI, data governance, and related emerging technology risks (preferred).
• Hands‑on experience with IAM platforms, security monitoring tools, and cloud identity solutions (advantageous).
• Relevant certifications such as CISSP, CISM, CISA, or Security+ (preferred).
• Experience working in regulated environments such as financial services, healthcare, or government (a plus).

Pay

Pay Range: $55.00 – $65.00 Hourly

Schedule

This position is based in the office and requires the employee to work on‑site.