Job Description
GenAI Security and NIST Framework Consultant

Location:
Toronto, ON – Hybrid (2–3 days Work From Office) Duration: 6–12 Months

Experience:
10+ Years, Required Cybersecurity

Experience:
8+ Years (Must have) Role Overview We are seeking a Security GenAI Security and NIST Framework Consultant to lead AI security assessments, evaluate AI/GenAI security risks, and provide strategic guidance on AI governance, risk, and compliance.

Key Responsibilities

- Lead end-to-end AI security assessment engagements, including planning, execution, reporting, and stakeholder management.
- Conduct AI/GenAI security, governance, risk, and compliance assessments.
- Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
- Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
- Perform AI threat modeling and identify risks such as prompt injection, data leakage, model abuse, and supply chain vulnerabilities.
- Evaluate controls against NIST AI RMF, ISO 42001, OWASP LLM Top 10, and organizational security requirements.
- Develop gap analyses,



risk ratings, remediation recommendations, and maturity assessments.
- Create executive-ready assessment reports, roadmaps, and presentation materials.
- Provide strategic guidance on secure AI adoption, governance, and operationalization.
- Manage project governance, timelines, risks, issues, and customer communications. Technical

Skills:

- AI Security and Generative AI Security
- Large Language Models (LLMs) and AI/ML Security
- AI Governance and Responsible AI
- NIST AI RMF, MITRE ATLAS, and AI Threat Modeling
- Microsoft Copilot and Azure OpenAI Security
- Security Compliance and Regulatory Frameworks
- Stakeholder Management and Workshop Facilitation Required Experience and Qualifications
- 8+ years of experience in cybersecurity delivery.
- Experience leading enterprise security assessments and advisory engagements.
- Hands-on experience with AI/GenAI, cloud security, and governance frameworks.
- Robust executive communication and client-facing consulting skills.

📌 Security Consultant (Ontario)
🏢 IMCS Group
📍 Ontario