Director, AI Security

Accountabilities:: Define and lead the enterprise AI security strategy, establishing scalable capabilities covering generative AI, large language models (LLMs), AI agents, AI applications, model lifecycle management, and AI supply chain security. Develop and oversee security frameworks, standards, and operational controls to protect AI systems throughout their development, deployment, and ongoing operation. Establish enterprise-wide AI discovery and usage management capabilities to identify AI applications, models, agents, and services while enforcing access controls and preventing sensitive data exposure. Lead AI agent identity and authorization security, including non-human identities, credentials, service accounts, and least-privilege permissions, in collaboration with Identity and Access Management teams. Oversee AI security assessments, threat modeling, vulnerability management, adversarial testing, penetration testing, and red-team activities to identify and mitigate emerging threats such as prompt injection, model poisoning, and unauthorized data access. Establish AI onboarding and security assurance processes, defining approval criteria for production deployment and ensuring appropriate safeguards for new and advanced AI capabilities. Integrate AI security monitoring, telemetry, and threat detection into enterprise security operations, partnering with cyber defense teams on investigation, incident response, containment, and remediation. Leverage advanced AI models to identify cybersecurity exposures, prioritize risks, accelerate investigations, and support remediation through controlled automation and human validation. Collaborate with AI governance, privacy, technology architecture, risk management, application security, and vulnerability management teams to embed security controls into enterprise AI standards and processes. Manage AI security vendors, budgets, technology investments, and strategic partnerships while ensuring effective resource allocation and capability development. Lead and develop high-performing global security teams, establish clear accountability, and provide executive-level reporting on security performance, emerging risks, and strategic priorities. Drive continuous improvement through measurable security coverage, control effectiveness, operational efficiency, and demonstrable reductions in enterprise cybersecurity risk. Requirements: Bachelor's degree in Computer Science, Information Security, Engineering, Information Systems, or a related technical discipline, or equivalent professional experience. A master's degree in Cybersecurity, Engineering, or Business Administration is preferred. At least 12 years of progressive experience in cybersecurity, application security, security engineering, or related disciplines, including leadership of enterprise security capabilities and recent hands-on experience securing AI-enabled systems. Demonstrated experience implementing and scaling AI security capabilities across generative AI services, applications, agents, and models, with measurable improvements in security coverage and risk reduction. Strong understanding of AI and machine learning lifecycles, large language models, retrieval-augmented generation (RAG), model APIs, and agent tool integrations, including their associated security risks. Practical expertise in AI discovery, identity and access management, least-privilege authorization, secrets protection, data loss prevention, runtime safeguards, and AI threat mitigation. Proven ability to identify and address AI-specific vulnerabilities, including prompt injection, sensitive data exposure, excessive agent permissions, tool misuse, model theft, adversarial manipulation, and model or data poisoning. Experience in cloud and platform security, including protecting the cloud, data, and identity infrastructure supporting enterprise AI workloads. Knowledge of security operations and incident response, including detection engineering, investigation, containment, and remediation of threats affecting AI systems. Demonstrated leadership experience managing technical security teams, global stakeholders, external vendors, budgets, and multiple strategic initiatives within complex, matrixed organizations. Excellent executive communication, strategic thinking, and stakeholder management skills, with the ability to translate emerging technical threats into practical business priorities. Ability to balance innovation, security, regulatory obligations, operational continuity, and business objectives while building scalable, repeatable security processes. Experience in regulated healthcare, pharmaceutical, medical technology, or life sciences environments is strongly preferred, particularly with HIPAA, GxP, and validated systems. Familiarity with relevant security frameworks and standards, including the NIST AI Risk Management Framework, OWASP AI security guidance, MITRE ATLAS, FDA cybersecurity guidance, and related industry practices. Experience securing multi-agent systems, Model Context Protocol (MCP) integrations, open-weight models, fine-tuned models, and AI-enabled software delivery pipelines is an advantage. Knowledge of adversarial AI research, AI red teaming, MLOps security, automated security evaluation, and frontier AI applications in cybersecurity is highly desirable. Relevant professional certifications such as CISSP, CISM, CSSLP, GIAC AI Platform Security (GAIPS), GIAC AI Security Automation Engineer (GASAE), or ISACA AAISM are preferred. Fluency in English is required; additional languages are an advantage. Willingness to travel domestically and internationally up to 20%. Benefits: Competitive annual base salary: $154,000–$265,650, depending on experience, qualifications, and location. Eligibility for a long-term incentive program. Retirement benefits, including a company-sponsored pension plan and 401(k) savings plan. Paid vacation: 120 hours per calendar year. Paid holidays: 13 days annually, including floating holidays. Paid sick leave: 40 hours annually, with additional allowances in certain states. Work, personal, and family time benefits of up to 40 hours annually. Parental leave: Up to 480 hours within one year of a child's birth, adoption, or foster care placement. Bereavement leave and caregiver leave. Volunteer leave of up to 32 hours annually. Military spouse time-off benefits of up to 80 hours annually. Fully remote working arrangement, with eligible U.S. locations including New Jersey. Opportunities to lead global initiatives, work with advanced AI technologies, and influence enterprise-wide cybersecurity strategy. A collaborative, inclusive environment focused on professional development, innovation, and meaningful healthcare impact.