Senior AI Security Risk Assessment Consultant

Our customer is a large United States insurance company that is backed by more than 100 years of experience and provides insurance products and services for businesses and professionals in the United States., Canada and Europe. Headquartered in Chicago, IL, they have more than 20 US locations.

Our customer is seeking a Senior AI Security Risk Assessment Consultant on a contract basis to support their business needs. This role is 100% Onsite at Chicago, IL.

• Seeking an experienced AI Security Risk Assessment Consultant to perform security-focused risk assessments for Artificial Intelligence (AI) initiatives across the organization. The consultant will evaluate AI use cases, technologies, models, agents, and third-party AI solutions to identify security, privacy, compliance, operational, and technology risks. This individual will apply the organization's established AI Risk Assessment methodology to assess risks, evaluate controls, document findings, and provide recommendations that support secure and responsible adoption of AI technologies.

• Conduct AI security and technology risk assessments for enterprise AI initiatives and business use cases.
• Evaluate risks associated with Generative AI, Large Language Models (LLMs), AI agents, machine learning solutions, and third-party AI service providers.
• Assess the design and effectiveness of security, privacy, governance, and risk management controls implemented within AI solutions.
• Identify and evaluate AI-specific threats, including prompt injection, data leakage, model manipulation, insecure integrations, training data exposure, and other emerging AI-related risks.
• Facilitate risk assessment workshops with business, technology, security, and governance stakeholders.
• Document risk findings, control gaps, mitigation recommendations, risk ratings, and executive summaries.
• Support AI Governance reviews by providing risk and control assessments for proposed AI use cases.
• Monitor emerging AI risks, threats, and regulatory developments to ensure assessments remain aligned with industry expectations.

• 7+ years of experience in Cybersecurity, Information Security, Technology Risk Management, or Cyber Risk Management.
• Experience performing security risk assessments, control assessments, and technology risk reviews.
• Strong understanding of Generative AI, Large Language Models (LLMs), AI agents, and common AI security risks.
• Familiarity with AI governance, cybersecurity controls, and risk management practices.
• Ability to analyze complex technology solutions and communicate risk findings to technical and non-technical stakeholders.
• Excellent written documentation and stakeholder engagement skills.

• Experience supporting Insurance, Financial Services, Banking, or other highly regulated industries.
• Familiarity with NIST AI RMF, NIST Cybersecurity Framework (CSF), MITRE ATLAS, OWASP Top 10 for LLM Applications, and AI threat modeling practices.
• Certifications such as CISSP, CRISC, CGRC, CISA, CISM, or AIGP.

We offer a competitive salary range for this position. Most candidates who join our team are hired at the median of this range, ensuring fair and equitable compensation based on experience and qualifications.

Contractor benefits are available through our 3rd Party Employer of Record (Available upon completion of waiting period for eligible engagements)

• Medical
• Dental
• Vision
• 401k

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.