Principal Consultant of AI Security

JOB SUMMARY:

The Principal Consultant of AI Security will be responsible for providing architect-level thought leadership and expertise in securing enterprise AI programs, including AI models, applications, agents, data, and the pipelines and platforms they run on. Under the direction of AI Security leadership, the Principal Consultant will lead Trace3’s most complex client engagements in this domain, serve as a senior technical authority for AI security architecture across the Security Solutions practices, and turn that work into the reference architectures, offerings, and enablement that allow Trace3 associates, partners, and regional teams to help clients adopt and scale AI in a secure, resilient, and trustworthy manner.

SUMMARY OF ESSENTIAL JOB FUNCTIONS:

• Lead client engagements as the Subject Matter Expert (SME) across the full range of AI security services, including assessment, strategy, architecture, and design engagements spanning AI models, applications, agents, data, and the pipelines and platforms they run on, from discovery through executive readout.
• Engage with clients to assess needs and provide strategic, tactical, and operational recommendations that translate AI risk into business terms for CISO-, CIO-, and board-level audiences, positioning security as the enabler of the client’s AI program rather than a constraint.
• Own and evolve the practice’s AI security offerings, and author the reference architectures, standards, and design patterns that allow the Security Solutions practices to deliver one coherent AI security answer to a client rather than several overlapping ones.
• Collaborate with a multidisciplinary team across Security Solutions (Governance, Risk & Compliance; Identity; Cloud and Application Security; Data Security; Security Operations; Cyber Resiliency), Data & Analytics, Digital Consulting, Innovation, and Service Delivery to scope, design, and deliver programs, solutions, and services engagements that enable secure and responsible AI transformation.
• Develop and maintain Trace3’s point of view on emerging AI security problems, including trustworthy agents, agent-to-agent trust and delegation, non-human identity, and AI resilience, and contribute that point of view to Trace3’s solution plays and go-to-market initiatives.
• Develop and deliver enablement for regional solutions architects and sellers, including discovery and qualification guidance for AI security opportunities and delivery playbooks for standardized assessment work, ensuring AI security can be recognized, opened, and sold by the field without the Principal in every conversation.
• Foster and contribute to partnerships with AI security and platform vendors, hyperscalers, delivery partners, industry groups, and research institutions, influencing roadmaps, shaping joint offerings, and ensuring client and organizational needs are consistently exceeded.
• Advocate on behalf of Trace3 on the importance of AI security through speaking engagements, publications, client and partner briefings, and participation at industry events and forums.
• Provide subject matter expertise with respect to AI security, including staying up to date on the latest threats, techniques, technologies, regulatory requirements, industry standards, frameworks, and best practices, and with the technologies that operationalize AI security controls.
• Mentor consultants, solutions architects, and interns within the practice and across regions, transferring judgment as well as knowledge, and contributing to Trace3’s leadership and talent development standards.

REQUIRED SKILLS AND EXPERIENCE:

• A Bachelor’s degree in computer science, Cybersecurity, or equivalent information security, engineering, data science, or related discipline from an accredited college or university, or measurable knowledge/experience from proven industry, military, defense, or government operations.
• Experience in a customer-facing technology consulting, solutions architecture, or professional services role.
• 10+ years’ experience developing, implementing, and managing Cybersecurity strategies, programs, architectures, technologies, and associated controls.
• 3+ years’ experience securing AI/ML systems in production, including at least two of: model and AI supply chain security, LLM and AI application security, agentic AI or autonomous system security, AI data and pipeline security, or AI red teaming and adversarial testing.
• Demonstrated ability to design and defend AI security architectures for enterprise environments, including controls for AI agents, non-human identities, delegated access, tool invocation, and constrained action across systems.
• Subject matter expertise of AI security and Trustworthy AI Principles, Frameworks, and Standards including, but not limited to, NIST AI RMF, ISO 42001:2023, ISO 5338:2024, OWASP Top 10 for LLM Applications and Agentic Applications, MITRE ATLAS, and CSA AI controls.
• Subject matter expertise of Cybersecurity Principles, Frameworks, and Standards including NIST CSF, CSA CCM, MITRE ATT&CK, and ISO 27001.
• Working knowledge of AI governance and regulatory requirements (including the EU AI Act and emerging U.S. state and sector requirements) sufficient to partner effectively with Governance, Risk & Compliance on AI risk programs.
• Working knowledge and hands-on experience with at least one (preferably multiple) major cloud service providers (AWS, GCP, Azure), their AI platforms and services, and their native AI security capabilities.
• Knowledge and hands-on experience with technologies that operationalize AI security, including but not limited to AI security posture management, LLM gateways and guardrails, AI runtime protection, agent identity and authorization, model registries and AI supply chain controls, and AI-aware data security.
• Ability to collaborate cross-functionally with software engineers, data scientists, platform teams, and security personnel to assess security risks and requirements throughout the AI development and deployment lifecycle.
• Certifications including CISSP, CCSP, AIGP, AAISM, or cloud AI/security certifications from at least one major CSP are highly preferred.
• Prior experience packaging offerings, authoring reference architectures, or running technical enablement or certification programs is highly preferred.
• Public technical voice, including talks, published research, or open-source contributions in AI security, is highly preferred.
• Ability to conduct training workshops, assessments, and executive briefings and to develop clear, concise reporting and recommendations.
• Knowledge and experience creating and maintaining technical documentation, presentations, plans, roadmaps, etc.
• Strong executive communication skills, including the ability to make complex AI security problems understandable to executives and to defend a recommendation under challenge.
• Strong interpersonal and communication skills are required.
• Strong customer presentation skills are required.
• Motivated self-starter who loves to solve challenging problems and feels comfortable working directly with customers.
• Highly organized, detail-oriented, excellent time management skills, and able to effectively prioritize tasks in a fast-paced, high-volume, and evolving work environment.
• Comfortable managing multiple and changing priorities, and meeting deadlines in an entrepreneurial environment.
• Ability to travel when needed (25–35%); holds a valid driver’s license.