Senior Information Security Analyst – Agentic AI

Role Summary
This senior-level role involves leading the design, implementation, and oversight of identity governance controls for autonomous and semi-autonomous AI agents operating within enterprise systems. The position focuses on establishing governance frameworks that treat AI agents as non-human identities, ensuring compliance with security standards, risk management protocols, and regulatory requirements. The role requires a strategic thinker with strong expertise in identity management and AI security governance.

Responsibilities

• Develop and maintain identity governance standards and policies specific to AI agents, including registration, classification, ownership, and lifecycle management.
• Establish access control models based on least privilege, segregation of duties, and policy-based authorization for AI-enabled systems.
• Collaborate with cybersecurity, IAM, AI engineering, compliance, and legal teams to ensure AI agents function within approved enterprise guardrails.
• Design governance processes for onboarding, credential issuance, privileges management, access reviews, decommissioning, and emergency actions related to AI agents.
• Assess risks associated with autonomous AI activities, including tool use, decision-making, privileged operations, and memory management.
• Implement monitoring, logging, and audit controls to ensure AI agent actions are traceable, attributable, and reviewable by appropriate human oversight.
• Support the development of policies for human-in-the-loop oversight, escalation procedures, and exception handling specific to AI systems.
• Conduct periodic reviews such as access certifications, control testing, and maturity assessments of AI identity governance controls.
• Contribute to threat modeling to identify and mitigate risks including identity misuse, privilege escalation, credential compromise, and policy violations.
• Prepare high-level reports for executives on the effectiveness of identity controls, residual risks, and compliance status related to AI agents.

Qualifications

• 5+ years of experience in information security, identity and access management, risk management, or cybersecurity roles.
• Proven expertise in identity governance and administration, privileged access management, and access lifecycle management.
• Experience designing or operating controls for non-human identities, machine identities, APIs, automation platforms, or AI-enabled systems.
• Strong knowledge of Zero Trust principles, least-privilege access, and enterprise security architecture.
• Experience with risk assessment, audit processes, compliance standards, and security documentation.
• Ability to translate emerging technology risks into actionable governance policies and procedures.
• Excellent stakeholder management, problem-solving skills, and clear written communication abilities.
• Familiarity with AI governance, model risk, responsible AI, data governance, and related emerging technology risks is preferred.
• Hands-on experience with IAM platforms, security monitoring tools, and cloud identity solutions is advantageous.
• Relevant certifications such as CISSP, CISM, CISA, or Security+ are preferred.
• Experience working in regulated environments such as financial services, healthcare, or government is a plus.

Publishing Pay Range: $55.00 - $65.00 Hourly 

This position is based in the office and requires employee to work on-site.