AI Security and Controls SME

Software Guidance & Assistance, Inc., (SGA), is searching for an AI Security and Controls Subject Matter Expert for a CONTRACT assignment with one of our premier Financial Services clients in New York, NY.

We're seeking someone to join our team as an AI Security and Controls Subject Matter Expert to design, execute, and define a AI assurance strategy, risk and control matrix, guidance. This is a full time consultant that will work in the technology audit team, within Internal Audit, to manage/execute risk based assurance activities for Firm's use of GenAI or Artificial Intelligence in general.

Responsibilities:

• Execute a wide range of assurance activities focused on the controls, governance, and risk management of generative AI models used within the organization.
• Review and assess privacy controls, data protection measures, and security protocols applied to AI models, including data handling, access management, and compliance with regulatory standards.
• Good understanding of current and upcoming GenAI models.
• Stay current with and implement new audit tools and techniques relevant to AI/ML systems, including model interpretability, fairness, and robustness assessment tools.
• Develop clear and concise messages regarding risks and business impact related to AI models, including model bias, drift, and security vulnerabilities.
• Identify, collect, and analyze data relevant to model performance, privacy, and security, leveraging both structured and unstructured sources.
• Test controls over AI model development, deployment, monitoring, and lifecycle management, including data lineage, model versioning, and access controls.
• Identify control gaps and open risks, raise insightful questions to identify root causes and business impact, and draw appropriate conclusions.

Required Skills:

• Master's or bachelor's degree (Computer Science, Data Science, Information Security, or related field preferred).
• At least 3-4 years' relevant experience in technology audit, AI/ML, data privacy, or information security.
• Understanding of audit principles, tools, and processes (risk assessments, planning, testing, reporting, and continuous monitoring), with a focus on AI/ML systems.
• Ability to communicate clearly and concisely, adapting messages for technical and non-technical audiences.
• Ability to identify patterns, anomalies, and risks in model behavior and data.
• Strong understanding of:
  • AI/ML model development and deployment processes
  • Model interpretability, fairness, and robustness concepts
  • Privacy frameworks (e.g., GDPR, CCPA)
  • Security standards (e.g., NIST, ISO 27001/02)
  • Data governance and protection practices

Preferred Skills:

• CISA, CISSP, or relevant AI/ML certifications

#LI-SY1

SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .

SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.