Senior Information Security Analyst - Agentic AI

This senior-level position is responsible for the design, implementation, and oversight of identity governance controls for autonomous and semi-autonomous AI agents operating within enterprise environments. The role focuses on establishing governance frameworks for AI agents as non-human identities and supporting alignment with security standards, risk management practices, and applicable regulatory requirements. This position requires strong expertise in identity management, security governance, and emerging AI-related risks.

• Develop and maintain identity governance standards and policies for AI agents, including registration, classification, ownership, and lifecycle management.
• Establish access control models based on least privilege, segregation of duties, and policy-based authorization for AI-enabled systems.
• Collaborate with cybersecurity, identity and access management (IAM), AI engineering, compliance, and legal teams to support appropriate governance of AI agents.
• Design governance processes for onboarding, credential issuance, privilege management, access reviews, decommissioning, and emergency actions related to AI agents.
• Assess risks associated with autonomous AI activities, including tool use, decision-making, privileged operations, and memory management.
• Develop and support monitoring, logging, and audit controls designed to make AI agent activity traceable, attributable, and available for appropriate human review.
• Support policies and procedures for human oversight, escalation, and exception handling related to AI systems.
• Conduct periodic access certifications, control testing, and maturity assessments of AI identity governance controls.
• Contribute to threat modeling and risk mitigation efforts related to identity misuse, privilege escalation, credential compromise, and policy violations.
• Prepare executive-level reporting on identity control effectiveness, residual risk, and compliance considerations related to AI agents.

• 5+ years of experience in information security, identity and access management, risk management, cybersecurity, or a related field.
• Demonstrated expertise in identity governance and administration, privileged access management, and access lifecycle management.
• Experience designing or operating controls for non-human identities, machine identities, APIs, automation platforms, or AI-enabled systems.
• Strong knowledge of Zero Trust principles, least-privilege access, and enterprise security architecture.
• Experience with risk assessments, audit processes, compliance standards, and security documentation.
• Ability to translate emerging technology risks into actionable governance policies and procedures.
• Strong stakeholder management, problem-solving, and written communication skills.
• Familiarity with AI governance, model risk, responsible AI, data governance, or related emerging technology risks is preferred.
• Hands-on experience with IAM platforms, security monitoring tools, or cloud identity solutions is a plus.
• Relevant certifications such as CISSP, CISM, CISA, Security+, or similar credentials are preferred.li>
• Experience working in regulated environments such as financial services, healthcare, or government is a plus.

This position is based in the office and requires employee to work on-site.

At GDH, we believe in the power of people and the importance of caring. Our culture statement, "We care about people," isn't just a tagline - it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs.

Who We Are:

GDH, founded in 2001, has grown into a…