[Hiring] AI Security Manager @Eide Bailly LLP

Role Description

The AI Security Manager is responsible for leading the firm's AI security practice, setting security standards for AI-enabled systems, autonomous agents, and multi-platform AI workloads across the Microsoft environment. This role serves as the day-to-day security authority for AI adoption.

• Leads the firm's AI security practice, translating AI security strategy into standards, controls, and delivery outcomes across initiatives.
• Serves as a technical authority on the Microsoft 365 E7 security stack, including Entra ID, Defender, Purview, Sentinel, Agent 365, and Intune.
• Conducts enterprise architecture reviews of AI products, agents, IDE extensions, and M365 add-ins.
• Applies the EA Decision Scoring Matrix and security risk assessment criteria to approve or deny AI tool and platform requests.
• Partners with the data team on data governance for AI workloads.
• Supports the legal and risk teams by reviewing and informing AI-related legal, contractual, and policy language.
• Defines and enforces security policies for autonomous agents.
• Performs AI threat modeling and risk assessment across various vectors.
• Monitors and governs MCP server connections, OAuth consent flows, and cross-platform agent communications.
• Integrates third-party AI compliance APIs into the firm's centralized SIEM.
• Supports design and governance of isolated development environments for installed AI coding tools.
• Partners with the EB Security Team, enterprise architecture, and digital delivery teams to embed AI security.
• Translates security requirements into actionable work items within agile delivery teams.
• Participates in the AI / Security Governance Council and presents AI security recommendations to technology leadership.
• Provides leadership, coaching, and mentorship to security and engineering associates.
• Monitors the evolving AI threat landscape and drives continuous improvement in AI security practices.
• Resolves complex technical and delivery issues while managing trade-offs and competing priorities.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field required.
• 5 - 8+ years of progressive experience in enterprise security architecture, engineering, or operations.
• 3+ years of hands-on experience with Microsoft security technologies (Entra ID, Defender, Purview, Sentinel, DLP).
• Demonstrated experience securing AI, machine learning, or automation workloads in an enterprise environment.
• Experience conducting architecture or security reviews of third-party products for fit within a Microsoft-centered enterprise environment.
• Experience partnering with data governance, legal, or risk functions on policy, contractual, or compliance matters.
• Familiarity with multi-vendor AI platform security models.
• Proven experience mentoring, coaching, and developing technical talent.
• Experience delivering enterprise-level technology solutions in Agile or iterative environments preferred.
• Preferred certifications: CISSP, CISM, Microsoft SC-100/SC-200/SC-300, or equivalent.
• Preferred experience in professional services, financial services, or regulated industries preferred.
• Deep knowledge of Microsoft 365 E7 security architecture.
• Expertise in Zero Trust security principles.
• Understanding of AI-specific security risks.
• Working knowledge of enterprise architecture review practices.
• Knowledge of data governance practices for AI workloads.
• Able to interpret AI vendor terms and translate technical control realities.
• Knowledge of third-party AI platform security architectures.
• Knowledge of AI vendor licensing models and their impact on security control availability.
• Understanding of installed AI IDE and agentic tool security risks.
• Working knowledge of Scrum and agile delivery practices.
• Knowledge of regulatory and compliance frameworks relevant to professional services.
• Strong stakeholder management and communication skills.
• Analytical skills to evaluate threat intelligence and assess risk.
• Sound judgment and problem-solving skills.
• Must be authorized to work in the United States now or in the future without visa sponsorship.

Benefits

• Generous paid time off.
• Comprehensive medical, dental, and vision insurance.
• 401(k) profit sharing.
• Life and disability insurance.
• Lifestyle spending account.
• Certification incentives.
• Education assistance.
• Referral program.