Director, AI Security

This is a senior cybersecurity leadership opportunity focused on building and scaling enterprise-wide AI security capabilities within a highly regulated healthcare environment. You will define and execute strategies that protect AI platforms, models, applications, and autonomous agent ecosystems across the organization. Working at the intersection of cybersecurity, artificial intelligence, cloud technology, and enterprise risk management, you will enable secure AI adoption while protecting sensitive information and critical operations. You will lead global technical teams, establish scalable security frameworks, and drive innovation in AI threat detection and remediation. Collaborating with engineering, security operations, privacy, and risk management leaders, you will embed security throughout the AI lifecycle. This role offers the opportunity to shape the future of enterprise AI security while delivering measurable improvements in resilience, compliance, and risk reduction.

• Bachelor's degree in Computer Science, Information Security, Engineering, Information Systems, or a related technical discipline, or equivalent professional experience. A master's degree in Cybersecurity, Engineering, or Business Administration is preferred.

• At least 12 years of progressive experience in cybersecurity, application security, security engineering, or related disciplines, including leadership of enterprise security capabilities and recent hands-on experience securing AI-enabled systems.

• Demonstrated experience implementing and scaling AI security capabilities across generative AI services, applications, agents, and models, with measurable improvements in security coverage and risk reduction.

• Strong understanding of AI and machine learning lifecycles, large language models, retrieval-augmented generation (RAG), model APIs, and agent tool integrations, including their associated security risks.

• Practical expertise in AI discovery, identity and access management, least-privilege authorization, secrets protection, data loss prevention, runtime safeguards, and AI threat mitigation.

• Proven ability to identify and address AI-specific vulnerabilities, including prompt injection, sensitive data exposure, excessive agent permissions, tool misuse, model theft, adversarial manipulation, and model or data poisoning.

• Experience in cloud and platform security, including protecting the cloud, data, and identity infrastructure supporting enterprise AI workloads.

• Knowledge of security operations and incident response, including detection engineering, investigation, containment, and remediation of threats affecting AI systems.

• Demonstrated leadership experience managing technical security teams, global stakeholders, external vendors, budgets, and multiple strategic initiatives within complex, matrixed organizations.

• Excellent executive communication, strategic thinking, and stakeholder management skills, with the ability to translate emerging technical threats into practical business priorities.

• Ability to balance innovation, security, regulatory obligations, operational continuity, and business objectives while building scalable, repeatable security processes.

• Experience in regulated healthcare, pharmaceutical, medical technology, or life sciences environments is strongly preferred, particularly with HIPAA, GxP, and validated systems.

• Familiarity with relevant security frameworks and standards, including the NIST AI Risk Management Framework, OWASP AI security guidance, MITRE ATLAS, FDA cybersecurity guidance, and related industry practices.

• Experience securing multi-agent systems, Model Context Protocol (MCP) integrations, open-weight models, fine-tuned models, and AI-enabled software delivery pipelines is an advantage.

• Knowledge of adversarial AI research, AI red teaming, MLOps security, automated security evaluation, and frontier AI applications in cybersecurity is highly desirable.

• Relevant professional certifications such as CISSP, CISM, CSSLP, GIAC AI Platform Security (GAIPS), GIAC AI Security Automation Engineer (GASAE), or ISACA AAISM are preferred.

• Fluency in English is required; additional languages are an advantage.

• Willingness to travel domestically and internationally up to 20%.