Principal - Cybersecurity Audit, Risk & Governance Architect – AI & Emerging Tech

• What you’ll be doing...
• AI Governance & Risk Management: Design, implement, and maintain the enterprise AI Risk Management Framework aligned with NIST AI RMF, ISO 42001, and emerging global regulations (e.g., EU AI Act).
• Audit & Compliance Management: Lead end-to-end execution of internal and external security audits (SOC 2 Type II, ISO 27001, etc.), managing evidence collection, remediation tracking, and auditor relationships.
• Third-Party AI & Vendor Risk: Evaluate third-party SaaS vendors and AI model providers for security posture, data privacy usage, training data retention, and regulatory compliance.
• Threat Modeling & Risk Assessments: Perform security risk assessments and threat models on new AI/ML initiatives, LLM integrations, and core platform capabilities.
• Cross-Functional Advisory: Serve as the primary security risk advisor to Product, Engineering, and Business leaders, embedding Security & Privacy by Design into product roadmaps.
• Metrics & Board Reporting: Establish metrics, KRIs, and reporting dashboards for the CISO and Executive Risk Committee regarding compliance status and emerging AI risks.
• What we’re looking for...
• Bachelor’s degree or four or more years of work experience.
• Six or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training.
• Six or more years of progressive experience in Information Security Risk Management, IT Audit, or Governance, Risk, and Compliance (GRC).
• Demonstrated experience evaluating risks associated with AI/ML systems, Large Language Models (LLMs), data pipeline security, or AI vendor tools.
• Proven track record leading SOC 2 Type II audits, ISO 27001 certifications, or regulatory compliance programs from preparation through remediation.
• Deep familiarity with NIST SP 800-53 / NIST SP 800-171 / NIST CSF, SOC 2 Type II, ISO 27001, PCI-DSS, and HIPAA, and AI-specific frameworks (NIST AI RMF, OWASP LLM Top 10).
• Basic understanding of cloud infrastructure (AWS/GCP/Azure), API security, data pipeline architecture, or software development lifecycles (SDLC).
• Even better if you have one or more of the following:
• Knowledge and experience in project managing multiple and simultaneous assessments and audits for continuous authorizations.
• Exceptional written and verbal communication skills with a proven ability to translate complex technical/regulatory requirements into actionable business guidance.
• If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.
• Where you’ll be working
• Scheduled Weekly Hours 40
• Equal Employment Opportunity   Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to veteran status, disability or other legally protected characteristics.

None flagged.