Artificial Intelligence Engineer- GRC

About the role

Glocomms is partnering with a leading financial firm to bring on a AI Engineer- GRC to help establish and scale the frameworks, controls, and oversight required for responsible enterprise AI adoption. This individual will lead efforts focused on AI governance, security, and risk management, helping ensure AI-enabled solutions are deployed safely, securely, and in alignment with organizational standards.

Key Responsibilities

Develop, implement, and continuously mature the organization's AI Secure Software Development Lifecycle (AI-SSDLC), ensuring appropriate governance controls are embedded throughout the AI development and deployment process.

Lead AI security assessments, threat modeling, and risk reviews for AI solutions, including agentic AI, LLM-powered applications, automation platforms, and third-party AI services.

Establish monitoring, oversight, and control mechanisms to identify security, compliance, privacy, and operational risks within AI environments.

Partner with Security, Legal, Compliance, Privacy, and Technology teams to define policies, standards, and governance requirements for enterprise AI adoption.

Maintain AI inventories, risk registers, and governance documentation while supporting regulatory readiness and audit activities.

Design scalable workflows, automation, and reporting capabilities that improve visibility into AI usage, security posture, and governance effectiveness.

Desired Background

Strong experience building or operating AI governance, AI-SSDLC, application security, or technology risk programs.

Knowledge of AI security concepts, including prompt injection, model misuse, excessive permissions, data leakage, trust boundaries, and agent security.

Experience conducting threat modeling and security reviews using industry-standard methodologies and risk frameworks.

Familiarity with enterprise AI governance tools, data protection controls, audit capabilities, and risk management platforms.

Ability to translate complex AI security and governance requirements into practical controls and processes that can be adopted across technical and business teams.

Strong communication skills with experience presenting risk, governance, and security concepts to technical stakeholders and senior leadership.

Qualifications

Bachelor's degree in Information Security, Computer Science, Risk Management, or a related field.

5+ years of experience in cybersecurity, governance, risk management, compliance, application security, software engineering, or a related discipline.

Hands-on experience supporting enterprise AI initiatives, including AI governance, AI-enabled automation, machine learning, or generative AI technologies.

Working knowledge of AI-SSDLC practices, AI risk management frameworks, and AI security controls.

Familiarity with platforms such as Microsoft Power Platform, AI orchestration tools, governance platforms, data protection technologies, and cloud security controls.

Understanding of AI threat modeling concepts, agentic workflows, model security, data governance, and access management principles.

Experience with frameworks such as NIST, OWASP, ISO, or similar security and risk management standards.

Scripting, automation, or low-code development experience using tools such as Python, PowerShell, or similar technologies preferred.

*** please note no sponsorship is offered