Senior Cyber Security Cloud Engineer

Osaic is seeking a Senior AI Security & Governance Engineer to help establish and mature the firm's AI security program. This role will lead efforts to identify, assess, and mitigate risks associated with artificial intelligence technologies while enabling secure adoption of AI across the organization.

The ideal candidate combines deep cybersecurity expertise with a strong understanding of AI technologies, data protection, governance, and risk management. This individual will partner across Security, Architecture, Compliance, Risk, Legal, and Technology teams to develop standards, controls, and processes that support responsible AI adoption.

Key Responsibilities
AI Security & Governance
Help develop and mature Osaic's AI security strategy and governance framework.
Establish security standards, policies, and risk management practices for AI technologies.
Conduct AI risk assessments and security reviews for new AI use cases and platforms.
Evaluate emerging AI threats and recommend appropriate controls.
Data Protection & Risk Management
Identify and mitigate risks involving sensitive data exposure through AI systems.
Partner with data governance teams to improve data classification, protection, and access controls.
Assess potential data oversharing and information leakage risks.
Support implementation of security, privacy, and compliance requirements related to AI.
Microsoft & Enterprise AI Security
Provide security guidance for Microsoft Copilot, Microsoft Purview, Microsoft Defender, Entra ID, Azure AI, and related technologies.
Review AI architectures, integrations, and third-party AI solutions for security and compliance risks.
Develop control requirements and security recommendations for AI-enabled solutions.
Program Development
Create repeatable processes for AI security reviews and risk assessments.
Support regulatory, audit, and governance initiatives related to AI.
Collaborate with stakeholders across the organization to promote secure and responsible AI adoption.
Required Qualifications
4+ years of experience in cybersecurity, security engineering, or security architecture.
Experience with cloud security and Microsoft security technologies.
Strong understanding of:
Data protection and governance
Identity and access management
Security architecture
Risk assessment and threat modeling
Security controls and compliance frameworks
Working knowledge of generative AI, large language models (LLMs), AI agents, and emerging AI security risks.
Strong communication skills with the ability to engage technical and non-technical stakeholders.
Preferred Qualifications
Experience with Microsoft Purview, Microsoft Defender, Entra ID, Microsoft 365, and Azure security solutions.
Experience with Microsoft Copilot or Azure OpenAI.
Experience with data security platforms such as Varonis.
Knowledge of NIST AI Risk Management Framework (AI RMF), ISO 42001, or similar governance frameworks.
Experience within a regulated industry such as financial services.
Scripting or automation experience using Python, PowerShell, or APIs.