Job Title: Security Gen AI Security and NIST Framework Consultant

: Security Consultant responsible for leading AI/GenAI security assessments, governance reviews, risk evaluations, and compliance initiatives while establishing secure AI adoption practices aligned with NIST AI RMF, ISO 42001, and enterprise security standards.

Location: Toronto, ON - Hybrid (2-3 Days WFO)

Contract Duration: 6-12 Month Contract

Key Responsibilities

- Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
- Conduct AI and Generative AI security, governance, risk, and compliance assessments.
- Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
- Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
- Perform AI threat modeling and identify risks such as:
- Prompt Injection
- Data Leakage
- Model Abuse
- Supply Chain Vulnerabilities

- Evaluate controls against:

- NIST AI Risk Management Framework (AI RMF)
- ISO 42001
- OWASP LLM Top 10
- Enterprise Security Standards

- Develop gap assessments, risk ratings, maturity assessments, and remediation roadmaps.
- Create executive-level reports, presentation materials, and security recommendations.
- Provide strategic guidance for secure AI adoption, governance, and operationalization.
- Manage project governance, timelines, risks, issues, and stakeholder communications.
- Support AI security program development and responsible AI initiatives.

Core Qualifications

- 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.




- Proven experience leading enterprise security assessments and advisory engagements.
- Strong expertise in:
- AI Security
- Generative AI Security
- AI Governance
- Responsible AI
- AI Risk Management

- Deep understanding of:

- Large Language Models (LLMs)
- AI/ML Security
- Prompt Security
- Model Security

- Experience with:

- NIST AI RMF
- MITRE ATLAS
- AI Threat Modeling
- Security Risk Assessments

- Experience assessing cloud-based AI services and AI-enabled applications.
- Strong knowledge of Microsoft Copilot and Azure OpenAI security controls.
- Experience with security compliance, governance, and regulatory frameworks.
- Solid stakeholder management, workshop facilitation, and consulting skills.
- Excellent executive communication and presentation skills.

Preferred Qualifications

- Experience implementing AI governance frameworks within large enterprises.
- Experience supporting Microsoft Copilot, Azure OpenAI, or enterprise GenAI initiatives.
- Knowledge of ISO 42001 and emerging AI regulations.
- Experience working with cloud security architectures across Azure, AWS, and GCP.
- Experience building AI security roadmaps and maturity improvement programs.
- Relevant cybersecurity certifications such as CISSP, CCSP, CISM, or equivalent.

Key Skills

- Artificial Intelligence (AI)
- Generative AI
- AI Security
- GenAI Security
- Large Language Models (LLMs)
- AI Governance
- Responsible AI
- NIST AI RMF
- ISO 42001
- MITRE ATLAS
- OWASP LLM Top 10
- Threat Modeling
- Microsoft Copilot Security
- Azure OpenAI
- Cloud Security
- Risk Management
- Security Assessments
- Compliance
- Cybersecurity
- Stakeholder Management
- Security Consulting
- Executive Reporting

📌 Request ID: 114583-1 (Toronto)
🏢 FlexStaf IT
📍 Toronto