Lead and approve security assessments for AI-enabled products, AI-bearing vendors, and third-party technologies
Act as the escalation point and named reviewer for high-risk and AI-related engagements
Define and continuously improve AI-focused assessment frameworks, including controls, evidence standards, and scoring models
Drive automation of assessment processes to improve efficiency, scalability, and turnaround time
Partner with TPRM, Procurement, Legal, Privacy, and Architecture teams to embed security into vendor selection and lifecycle processes
Provide expert advice on regulatory, legal, and third-party risk implications during solution design and vendor selection
Maintain audit-ready documentation and support regulatory compliance (e.g., OSFI B-13)
Produce risk reporting and insights for cybersecurity leadership
Monitor emerging AI threats and regulatory developments and integrate them into assessment practices
Mentor junior team members and support capability development

8+ years of experience in information security, including third-party risk or security assessments
Strong expertise in vendor/product security assessments and control evaluation
Experience assessing cloud, SaaS, and AI/ML vendor environments
Understanding of AI-related risks (e.g., data exposure, prompt injection, model vulnerabilities)
Familiarity with security frameworks and regulations (e.g., OSFI, NIST, ISO)
Strong stakeholder management and communication skills
Ability to lead complex initiatives and influence risk-based decisions

Lead AI, TPRM Security Assessor

Key skills