Cyber - AI Security - Senior - Consulting

EY is a globally connected professional services organization that helps clients create value and build trust through assurance, consulting, tax, strategy, and transactions. The Senior Consultant in AI Security will deliver AI security, AI Security Posture Management, and AI governance engagements by assessing AI risks, securing AI/ML pipelines, architecting security controls, and developing governance frameworks. The role also involves preparing client deliverables, advising technical and executive stakeholders, mentoring junior team members, and contributing to business development and practice-building efforts.

Responsibilities:

• As a Senior Consultant in AI Security, you will play an active and technically engaged role in delivering AI security, AI Security Posture Management (AI-SPM), and AI governance engagements while collaborating closely with clients and EY engagement teams
• You will conduct AI security assessments, evaluate AI/ML pipelines and model infrastructure, identify vulnerabilities inherent to AI systems, and develop practical, prioritized remediation strategies
• You will architect and support the implementation of AI-SPM solutions, configure AI security tooling—including platforms and harnesses—and help clients operationalize continuous monitoring and governance controls across their AI workloads
• In addition, as a Senior Consultant, you will develop AI governance frameworks, policies, and standards aligned to emerging regulatory requirements and industry guidance
• You will assist clients in designing AI risk management programs, performing AI model risk assessments, and building AI security roadmaps that balance innovation with responsible AI principles
• You will prepare client deliverables, technical architecture documentation, and executive-level presentations that communicate complex AI security concepts to both technical and non-technical audiences
• You will collaborate with multidisciplinary teams to deliver high-quality work products, support project planning and management activities, mentor junior team members, and contribute to business development initiatives, thought leadership, and practice-building efforts within EY’s growing AI security capability

Requirements:

• Strong understanding of AI/ML systems, architectures, and deployment patterns, including large language models (LLMs), generative AI, and MLOps pipelines
• Hands-on experience with AI Security Posture Management (AI-SPM) tools, platforms, and methodologies
• Ability to identify and assess security risks specific to AI systems, including prompt injection, model poisoning, data exfiltration, supply chain vulnerabilities, and adversarial attacks
• Experience configuring and operationalizing AI security and DevSecOps tooling, including platforms and harnesses, to enforce security controls within AI development and deployment pipelines
• Knowledge of AI governance frameworks, responsible AI principles, and emerging AI-specific regulatory requirements
• Strong critical thinking, analytical, and problem-solving skills applied to complex AI security and risk challenges
• Ability to communicate technical AI security concepts effectively to both engineering teams and executive stakeholders
• Experience developing technical architecture documentation, executive presentations, and client-facing deliverables
• Strong verbal and written communication skills
• Ability to manage competing priorities in a fast-paced consulting environment
• Strong attention to detail and commitment to high-quality client service
• Ability to build relationships and collaborate effectively across multidisciplinary teams and client organizations
• Demonstrated initiative, adaptability, and a commitment to staying current with the rapidly evolving AI security landscape
• A bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, and approximately 3–5 years of relevant experience, including at least 1–2 years in AI or machine learning security; or a graduate degree and 2–4 years of relevant experience
• Experience in one or more of the following areas:
• AI security assessments, AI-SPM, or AI model risk evaluations
• AI/ML pipeline security, model security, and MLOps security practices
• AI governance, responsible AI policy development, and AI risk management frameworks
• DevSecOps and CI/CD security, including hands-on experience with platforms and harnesses
• Cloud security with specific experience securing AI workloads on platforms such as AWS, Azure, or GCP
• AI regulatory compliance and emerging AI-specific standards and guidance
• Cybersecurity architecture, risk management, and security controls design
• Familiarity with AI security frameworks and guidance, including NIST AI RMF, OWASP Top 10 for LLMs, and MITRE ATLAS
• Working knowledge of foundational cybersecurity frameworks—including NIST CSF, NIST 800-53, and ISO 27001/27002—as applied within AI-enabled environments
• Strong Microsoft PowerPoint, Excel, and Word skills
• Willingness to travel based on client and business needs; travel estimated at 25–50%
• Professional certifications in cybersecurity (e.g., CISSP, CCSP, CISM) or emerging AI/ML security credentials
• Hands-on experience with AI-SPM platforms, MLOps tooling, and AI security automation technologies
• Experience with CI/CD orchestration and integrated security tooling, including harnesses, to enforce automated security gates within AI development pipelines
• Knowledge of adversarial machine learning techniques, model explainability requirements, and AI supply chain risk management
• Exposure to AI-related regulatory developments, including the EU AI Act, NIST AI RMF, and sector-specific AI guidance applicable to financial services, healthcare, or critical infrastructure
• Experience facilitating client workshops, technical design sessions, and AI security architecture reviews
• Background in software development, data engineering, or ML engineering that informs deep technical AI security expertise
• Experience within a consulting, professional services, or advisory environment