AI Security and Controls SME
Job Title: AI Security and Controls SME
Location: New York NY10019 (Hybrid 3 days onsite)
Duration: 06 Months Contract
Job id – MOR2JP00017024
Job Description:
- AI Security and Controls Subject Matter Expert to design and execute an define a AI assurance strategy, risk and control matrix, guidance.
- Client is seeking someone to join client team as a Full time Consultant to work in the technology audit team, within Internal Audit, to manage/execute risk-based assurance activities for Firm’s use of GenAI or Artificial Intelligence in general.
What candidates will bring to the role:
- Experience: At least 3 to 4 years’ relevant experience in technology audit, AI/ML, data privacy, or information security.
- Auditt Knowledge: Understanding of audit principles, tools, and processes (risk assessments, planning, testing, reporting, and continuous monitoring), with a focus on AI/ML systems.
- Communication: Ability to communicate clearly and concisely, adapting messages for technical and non-technical audiences.
- Analytical Skills: Ability to identify patterns, anomalies, and risks in model behaviour and data.
- Education: Master’s or bachelor’s degree (Computer Science, Data Science, Information Security, or related field preferred).
- Certifications: CISA, CISSP, or relevant AI/ML certifications (preferred, not required).
- Technical Knowledge: Strong understanding of:
- AI/ML model development and deployment processes
- Model interpretability, fairness, and robustness concepts
- Privacy frameworks (e.g., GDPR, CCPA)
- Security standards (e.g., NIST, ISO 27001/02)
- Data governance and protection practices
Internal Audit :
- The Internal Audit Department (IAD) reports directly to the Board Audit Committee and is an objective and independent function within client’s risk management framework. IAD assists senior management and the Audit Committee of the Board (BAC) in the effective discharge of their legal, fiduciary and oversight responsibilities. Comprises over 400 employees globally.
- IAD is responsible for providing independent assurance on the quality and effectiveness of client’s system of internal control, including risk management and governance systems and processes.
- IAD also serves as an objective and independent function within the Firm’s risk management framework to foster continual improvement of risk management processes by identifying and assessing operating risks and evaluating the adequacy and effectiveness of the Firm’s related internal controls.
- Based on these activities, IAD develops an independent and informed view of the risks faced by client and the effectiveness of the risk management processes employed to manage them.
- In doing so, we help drive Firm resources to vulnerabilities.
What candidates will do in the role:
- Conduct Model Audits: Execute a wide range of assurance activities focused on the controls, governance, and risk management of generative AI models used within the organisation.
- Model Security & Privacy Reviews: Review and assess privacy controls, data protection measures, and security protocols applied to AI models, including data handling, access management, and compliance with regulatory standards.
- Familiarity with GenAI Model: Good understanding of current and upcoming GenAI models.
- Adopt New Audit Tools: Stay current with and implement new audit tools and techniques relevant to AI/ML systems, including model interpretability, fairness, and robustness assessment tools.
- Risk Communication: Develop clear and concise messages regarding risks and business impact related to AI models, including model bias, drift, and security vulnerabilities.
- Data-Driven Analysis: Identify, collect, and analyse data relevant to model performance, privacy, and security, leveraging both structured and unstructured sources.
- Control Testing: Test controls over AI model development, deployment, monitoring, and lifecycle management, including data lineage, model versioning, and access controls.
- Issue Identification: Identify control gaps and open risks, raise insightful questions to identify root causes and business impact, and draw appropriate conclusions.
About PTR Global: PTR Global is a leading provider of information technology and workforce solutions. PTR Global has become one of the largest providers in its industry, with over 5000 professionals providing services across the U.S. and Canada. For more information visit
At PTR Global, we understand the importance of your privacy and security. We NEVER ASK job applicants to:
- Pay any fee to be considered for, submitted to, or selected for any opportunity.
- Purchase any product, service, or gift cards from us or for us as part of an application, interview, or selection process.
- Provide sensitive financial information such as credit card numbers or banking information. Successfully placed or hired candidates would only be asked for banking details after accepting an offer from us during our official onboarding processes as part of payroll setup.
Pay Range: $110 -$120
The specific compensation for this position will be determined by several factors, including the scope, complexity, and location of the role, as well as the cost of labor in the market; the skills, education, training, credentials, and experience of the candidate; and other conditions of employment. Our full-time consultants have access to benefits, including medical, dental, vision, and 401K contributions, as well as PTO, sick leave, and other benefits mandated by applicable state or localities where you reside or work.
If you receive a suspicious message, email, or phone call claiming to be from PTR Global, do not respond or click on any links. Instead, contact us directly at 1 . To report any concerns, please email us at
Add your LinkedIn Hashtag at end of the job description
Example- #LI-HY1