Posted 21 days ago
Request ID: 114583-1 - Security Gen AI Security and NIST Framework Consultant
@ Flexstaf IT
Toronto, Ontario
Overview
Flexstaf IT is hiring a Security Gen AI Security and NIST Framework Consultant on a 6-12 month contract in Toronto, ON, hybrid with 2-3 days in the office. The role leads AI and generative AI security assessments, governance reviews and risk evaluations against NIST AI RMF and ISO 42001, and delivers executive-level reports and remediation roadmaps.
Responsibilities:
- Lead end-to-end AI security assessment engagements
- Conduct AI and GenAI security, governance and risk assessments
- Perform AI threat modeling for prompt injection and data leakage
- Develop gap assessments, risk ratings and remediation roadmaps
- Create executive reports and security recommendations
Requirements summary:
- 10+ years in cybersecurity, security consulting or architecture
- Strong expertise in AI security and generative AI security
- Knowledge of NIST AI RMF, MITRE ATLAS and OWASP LLM Top 10
- Experience with Microsoft Copilot and Azure OpenAI security controls
- Excellent executive communication and presentation skills
Tools & skills
Source and dates
Source type not verified · manatal
- Employer posting date
- 2026-10-22
- First seen by our source
- 2026-10-22
- Source record updated
- 2026-10-29
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 10+ years |
| Work setting | Office, Client sites |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | CISSP, CCSP, CISM |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Flexstaf IT
| Field | Value |
|---|---|
| Open jobs on Jobsy | 86 |
Job Title: Security Gen AI Security and NIST Framework Consultant
Job Description: Security Consultant responsible for leading AI/GenAI security assessments, governance reviews, risk evaluations, and compliance initiatives while establishing secure AI adoption practices aligned with NIST AI RMF, ISO 42001, and enterprise security standards.
Location: Toronto, ON - Hybrid (2-3 Days WFO)
Contract Duration: 6-12 Month Contract
Key Responsibilities
- Lead end-to-end AI Security Assessment engagements, including planning, execution, reporting, and stakeholder management.
- Conduct AI and Generative AI security, governance, risk, and compliance assessments.
- Facilitate discovery workshops and interviews with security, technology, data, risk, and business stakeholders.
- Assess AI platforms, LLM applications, model lifecycle controls, and supporting cloud infrastructure.
- Perform AI threat modeling and identify risks such as:
- Prompt Injection
- Data Leakage
- Model Abuse
- Supply Chain Vulnerabilities
- Evaluate controls against:
- NIST AI Risk Management Framework (AI RMF)
- ISO 42001
- OWASP LLM Top 10
- Enterprise Security Standards
- Develop gap assessments, risk ratings, maturity assessments, and remediation roadmaps.
- Create executive-level reports, presentation materials, and security recommendations.
- Provide strategic guidance for secure AI adoption, governance, and operationalization.
- Manage project governance, timelines, risks, issues, and stakeholder communications.
- Support AI security program development and responsible AI initiatives.
Core Qualifications
- 10+ years of experience in Cybersecurity, Security Consulting, or Security Architecture.
- Proven experience leading enterprise security assessments and advisory engagements.
- Strong expertise in:
- AI Security
- Generative AI Security
- AI Governance
- Responsible AI
- AI Risk Management
- Deep understanding of:
- Large Language Models (LLMs)
- AI/ML Security
- Prompt Security
- Model Security
- Experience with:
- NIST AI RMF
- MITRE ATLAS
- AI Threat Modeling
- Security Risk Assessments
- Experience assessing cloud-based AI services and AI-enabled applications.
- Strong knowledge of Microsoft Copilot and Azure OpenAI security controls.
- Experience with security compliance, governance, and regulatory frameworks.
- Strong stakeholder management, workshop facilitation, and consulting skills.
- Excellent executive communication and presentation skills.
Preferred Qualifications
- Experience implementing AI governance frameworks within large enterprises.
- Experience supporting Microsoft Copilot, Azure OpenAI, or enterprise GenAI initiatives.
- Knowledge of ISO 42001 and emerging AI regulations.
- Experience working with cloud security architectures across Azure, AWS, and GCP.
- Experience building AI security roadmaps and maturity improvement programs.
- Relevant cybersecurity certifications such as CISSP, CCSP, CISM, or equivalent.
Key Skills
- Artificial Intelligence (AI)
- Generative AI
- AI Security
- GenAI Security
- Large Language Models (LLMs)
- AI Governance
- Responsible AI
- NIST AI RMF
- ISO 42001
- MITRE ATLAS
- OWASP LLM Top 10
- Threat Modeling
- Microsoft Copilot Security
- Azure OpenAI
- Cloud Security
- Risk Management
- Security Assessments
- Compliance
- Cybersecurity
- Stakeholder Management
- Security Consulting
- Executive Reporting
Journal
Only you can see this. Kept on this device, and in your account when you sign in.