Director, AI Security

Job Posting Organization:
The International Rescue Committee (IRC) is a global humanitarian organization that responds to the world's worst crises, helping people to survive and rebuild their lives. Established in 1933, the IRC operates in over 40 countries and has a workforce of more than 14,000 employees. The organization is dedicated to providing assistance to refugees and displaced persons, focusing on health, education, and economic wellbeing. The IRC's mission is to help people affected by conflict and disaster to recover and rebuild their lives, ensuring that they have the opportunity to thrive in their new environments.

Job Overview:
The Director, AI security" style="border-bottom: 1px dotted #007bff !important;">Security is a newly created senior leadership role responsible for building, leading, and continuously maturing the IRC’s AI security function. This position is crucial as AI agents and AI-powered tools become more prevalent across the organization. The Director will set the organizational direction for securing AI systems from initial design through production deployment, ongoing governance, and team development. This high-visibility, cross-functional leadership role will involve advising the Chief Information Security Officer (CISO), developing a dedicated AI security team, managing the function’s budget, and collaborating with various teams to ensure that AI adoption is secure by design. The role requires a strategic mindset to define and implement AI security policies, frameworks, and standards while ensuring compliance with regulatory requirements.

Duties and Responsibilities:
The Director, AI Security will have a wide range of responsibilities including defining and maturing the IRC's AI security strategy and program roadmap. They will establish and maintain an organization-wide AI agent registry, develop secure-by-default standards for AI agent development, and enforce AI security policies. The Director will coordinate GIS security reviews, perform security risk assessments, and manage defined SLA timelines for all reviews. They will also monitor the evolving AI threat landscape, lead post-incident reassessments, and evaluate third-party AI tools for security risks. Additionally, the Director will define technical security requirements for AI agents, establish governance frameworks for identity and data security, and develop AI-specific incident response runbooks. They will serve as the primary subject matter expert on AI-specific regulatory requirements and lead vendor evaluation for AI security tooling.

Required Qualifications:
Candidates must possess a Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related technical field. An advanced degree (Master's or equivalent) is preferred but not mandatory if the candidate has strong demonstrable experience. The role requires 10+ years of experience in information security, with at least 4-5 years in a senior security leadership role. Candidates should have hands-on experience securing AI/ML systems, conducting threat modeling, and managing security incidents involving automated or AI-driven systems. Experience in building and leading security teams, working cross-functionally with various stakeholders, and managing a security budget is essential.

Educational Background:
A Bachelor's degree in a relevant field such as Computer Science, Information Security, or Cybersecurity is required. An advanced degree is preferred but not essential if the candidate has significant experience in the field. The educational background should provide a strong foundation in technical concepts related to information security and AI systems.

Experience:
The position requires a minimum of 10 years of experience in information security, with a significant portion of that time spent in a leadership role. Candidates should have a proven track record of securing AI/ML systems and managing security incidents. Experience in threat modeling, security architecture reviews, and risk assessments for complex systems is crucial. Additionally, candidates should have experience in building and leading teams, as well as working collaboratively with various departments such as engineering, product, legal, and compliance.

Languages:
While the job description does not specify mandatory languages, proficiency in English is likely essential given the international nature of the organization. Additional language skills may be beneficial depending on the specific regions where the IRC operates.

Additional Notes:
This is a remote position open to internal candidates based in countries where the IRC operates, provided they have the right to work in their location. Successful candidates will be hired on a local employment contract and according to local salary scales. The compensation for this role varies by location, with a US pay range of $158,492-$184,536 per year and a UK pay range of £77,499-£93,814 per year. The exact offer will depend on various factors including labor market conditions, job type, internal equity, and the candidate's experience and skills. The IRC is an Equal Opportunity Employer and adheres to professional standards that promote integrity, service, equality, and accountability.