Position: Security Gen AI Security and NIST Framework Consultant

Type: Contract

Start Date: 10/31/2026

Duration: 6-12 Months

Location: Toronto, ON (Hybrid, 2 to 3 days onsite)

Security Consultant responsible for leading AI/GenAI security assessments, governance reviews, risk evaluations, and compliance initiatives while establishing secure AI adoption practices aligned with NIST AI RMF, ISO 42001, and enterprise security standards.

MANDATORY SKILLS

- 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
- Proven experience leading enterprise security assessments and advisory engagements.
- Strong expertise in: AI Security, Generative AI Security, AI Governance, Responsible AI
- AI Risk Management
- Deep understanding of: Large Language Models (LLMs), AI/ML Security, Prompt Security, Model Security
- Experience with: NIST AI RMF, MITRE ATLAS

KEY RESPONSIBILITIES

- Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
- Conduct AI and Generative AI security, governance, risk, and compliance assessments.
- Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
- Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
- Perform AI threat modeling and identify risks such as:
- Prompt Injection
- Data Leakage
- Model Abuse
- Supply Chain Vulnerabilities
- Evaluate controls against:
- NIST AI Risk Management Framework (AI RMF)
- ISO 42001
- OWASP LLM Top 10
- Enterprise Security Standards
- Develop gap assessments, risk ratings, maturity assessments, and remediation roadmaps.
- Create executive-level reports, presentation materials, and security recommendations.
- Provide strategic guidance for secure AI adoption, governance, and operationalization.
- Manage project governance, timelines,



risks, issues, and stakeholder communications.
- Support AI security program development and responsible AI initiatives.

KEY SKILLS

- Artificial Intelligence (AI)
- Generative AI
- AI Security
- GenAI Security
- Large Language Models (LLMs)
- AI Governance
- Responsible AI
- NIST AI RMF
- ISO 42001
- MITRE ATLAS
- OWASP LLM Top 10
- Threat Modeling
- Microsoft Copilot Security
- Azure OpenAI
- Cloud Security
- Risk Management
- Security Assessments
- Compliance
- Cybersecurity
- Stakeholder Management
- Security Consulting
- Executive Reporting

CORE QUALIFICATIONS

- 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
- Proven experience leading enterprise security assessments and advisory engagements.
- Strong expertise in: AI Security, Generative AI Security, AI Governance, Responsible AI
- AI Risk Management
- Deep understanding of: Large Language Models (LLMs), AI/ML Security, Prompt Security, Model Security
- Experience with: NIST AI RMF, MITRE ATLAS
- AI Threat Modeling
- Security Risk Assessments
- Experience assessing cloud-based AI services and AI-enabled applications.
- Strong knowledge of Microsoft Copilot and Azure OpenAI security controls.
- Experience with security compliance, governance, and regulatory frameworks.
- Robust stakeholder management, workshop facilitation, and consulting skills.
- Excellent executive communication and presentation skills.

PREFERRED QUALIFICATIONS

- Experience implementing AI governance frameworks within large enterprises.
- Experience supporting Microsoft Copilot, Azure OpenAI, or enterprise GenAI initiatives.
- Knowledge of ISO 42001 and emerging AI regulations.
- Experience working with cloud security architectures across Azure, AWS, and GCP.
- Experience building AI security roadmaps and maturity improvement programs.
- Relevant cybersecurity certifications such as CISSP, CCSP, CISM, or equivalent.

📌 Security Gen AI Security and NIST Framework Consultant (Greater Toronto Area)
🏢 Flexstaf I.T.
📍 Greater Toronto Area