Responsibilities
- Assess security, privacy, and regulatory risks associated with AI technologies prior to deployment, including tools like Copilot, ChatGPT Enterprise, Anthropic Claude, and AI-powered e-discovery platforms
- Detect and respond to threats unique to AI systems, such as prompt injection attacks, model poisoning, unauthorized data extraction through large language models, and unapproved AI tool usage
- Evaluate AI service providers' security practices, focusing on data location, use of customer data for training, data retention policies, and compliance with SOC 2 and ISO 42001 standards
- Collaborate across departments to safeguard sensitive client information, legal work product, and personally identifiable information from exposure to inadequately secured or public AI platforms
- Lead investigations and response actions for security events involving AI, including data leaks, misuse of models, and unauthorized access to AI accounts
- Design and conduct adversarial testing of internal and third-party AI systems, targeting vulnerabilities like jailbreaking, prompt manipulation, data exfiltration, model inversion, training data extraction, and malicious agent behavior; coordinate external red team assessments for critical systems and convert findings into actionable fixes
- Develop and deliver training programs and guidance on secure AI usage to promote organization-wide awareness and responsible practices
- Monitor and implement evolving AI governance frameworks, including NIST AI Risk Management Framework, EU AI Act, NY DFS Part 500, and specific client-driven AI controls
Compensation
The expected base salary for this position ranges from $140,000 to $180,000. Final compensation will vary based on candidate experience, qualifications, location, performance, and organizational needs.
Compensation
The anticipated base salary range offered for this role will be between $140,000 to $180,000 and represents the firm’s good faith and reasonable estimate of the range of possible base compensation. Actual base compensation will be dependent upon several factors, including but not limited to the candidate’s relevant experience, performance, qualifications, degrees, and location, well as the needs of the firm.
