AI Security Analyst

AI Security Analyst

Location:

Houston, TX 77002 (Hybrid)
Contract

Job Description :
Position Summary
The Artificial Intelligence Security Analyst will support the Client's Cybersecurity Program in establishing, implementing, and maturing the County’s Artificial Intelligence Governance and Security Program.
This position will assist in developing AI security standards, governance processes, risk assessments, compliance activities, and supporting documentation to promote the secure, responsible, ethical, and compliant adoption of artificial intelligence technologies throughout the County.
The Artificial Intelligence Security Analyst will collaborate with Governance, Risk, and Compliance, Information Security, Legal, Privacy, Procurement, Enterprise Architecture, technology teams, and business stakeholders to identify, evaluate, document, and mitigate risks associated with AI solutions and vendors. The position will help ensure AI initiatives align with County policies, cybersecurity requirements, industry best practices, and applicable state and federal laws and regulations.

Essential Duties and Responsibilities

• Support the development, implementation, and ongoing maturity of the Client's AI Governance and Security Program.
• Assist in establishing governance frameworks, processes, controls, and documentation for the responsible use of AI technologies.
• Perform security, privacy, compliance, and technology risk assessments for proposed and existing AI solutions.
• Evaluate AI use cases to identify cybersecurity, privacy, legal, ethical, operational, and compliance risks.
• Review proposed AI solutions for alignment with County policies, security requirements, governance standards, and applicable regulations.
• Develop and maintain AI security standards, procedures, guidelines, control requirements, and best-practice documentation.
• Assist with the development and maintenance of an enterprise inventory of AI systems, tools, vendors, models, and use cases.
• Support the classification and documentation of AI solutions based on risk, data sensitivity, business impact, and intended use.
• Conduct or support third-party AI vendor security reviews, due diligence assessments, and technology risk assessments.
• Evaluate vendor security documentation, privacy practices, data‑handling processes, model governance practices, and contractual security requirements.
• Identify risks associated with AI data collection, processing, retention, sharing, model training, and output generation.
• Recommend appropriate technical, administrative, contractual, and procedural controls to mitigate identified AI risks.
• Collaborate with Information Security, Governance, Risk, and Compliance, Legal, Privacy, Procurement, Enterprise Architecture, and business units on AI‑related initiatives.
• Provide security and governance guidance to County departments considering the acquisition, development, or use of AI technologies.
• Assist in developing processes for reviewing, approving, monitoring, and retiring AI solutions and use cases.
• Support the integration of AI governance requirements into existing cybersecurity, privacy, procurement, and technology governance processes.
• Assist in developing AI awareness, responsible‑use, and secure AI usage training for County employees, contractors, and stakeholders.
• Monitor emerging AI threats, vulnerabilities, attack methods, security concerns, regulatory developments, and industry best practices.
• Research developments related to generative AI, machine learning, large language models, automated decision‑making systems, and other emerging AI technologies.
• Support incident response, risk remediation, and corrective‑action activities involving AI technologies when needed.
• Maintain accurate governance records, risk assessments, review documentation, control mappings, findings, and remediation recommendations.
• Prepare reports, briefings, presentations, dashboards, and recommendations for cybersecurity leadership and executive management.
• Communicate complex AI security and governance topics clearly to technical and nontechnical audiences.
• Perform other related cybersecurity, governance, risk, compliance, and AI program duties as assigned.