layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Principal - Cybersecurity Audit, Risk & Governance Architect – AI & Emerging Tech at Verizon | LAYIQ

AI Governance & Risk Management: Design, implement, and maintain the enterprise AI Risk Management Framework aligned with NIST AI RMF, ISO 42001, and emerging global regulations (e.g., EU AI Act).
Audit & Compliance Management: Lead end-to-end execution of internal and external security audits (SOC 2 Type II, ISO 27001, etc.), managing evidence collection, remediation tracking, and auditor relationships.
Third-Party AI & Vendor Risk: Evaluate third-party SaaS vendors and AI model providers for security posture, data privacy usage, training data retention, and regulatory compliance.
Threat Modeling & Risk Assessments: Perform security risk assessments and threat models on new AI/ML initiatives, LLM integrations, and core platform capabilities.
Cross-Functional Advisory: Serve as the primary security risk advisor to Product, Engineering, and Business leaders, embedding "Security & Privacy by Design" into product roadmaps.
Metrics & Board Reporting: Establish metrics, KRIs, and reporting dashboards for the CISO and Executive Risk Committee regarding compliance status and emerging AI risks.
What we’re looking for...
You'll need to have: Bachelor’s degree or four or more years of work experience.
Six or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training.
Six or more years of progressive experience in Information Security Risk Management, IT Audit, or Governance, Risk, and Compliance (GRC).
Demonstrated experience evaluating risks associated with AI/ML systems, Large Language Models (LLMs), data pipeline security, or AI vendor tools.
Proven track record leading SOC 2 Type II audits, ISO 27001 certifications, or regulatory compliance programs from preparation through remediation.
Deep familiarity with NIST SP 800-53 / NIST SP 800-171 / NIST CSF, SOC 2 Type II, ISO 27001, PCI-DSS, and HIPAA, and AI-specific frameworks (NIST AI RMF, OWASP LLM Top 10).
Basic understanding of cloud infrastructure (AWS/GCP/Azure), API security, data pipeline architecture, or software development lifecycles (SDLC).
Even better if you have one or more of the following: Have one or more certification such as; IAPP Artificial Intelligence Governance Professional (AIGP), CDPSE, CRISC (Certified in Risk and Information Systems Control), CISA (Certified Information Systems Auditor) and/or CISSP, CISM.
Experience implementing or operating modern GRC automation platforms (e.g., Vanta, Drata, LogicGate, ServiceNow). Demonstrated experience setting up Continuous Control Monitoring (CCM) or automated evidence-polling integrations.
Knowledge and experience in project managing multiple and simultaneous assessments and audits for continuous authorizations.
Exceptional written and verbal communication skills with a proven ability to translate complex technical/regulatory requirements into actionable business guidance.
If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.
Where you’ll be working
In this hybrid role, you'll have a defined work location that includes working from home and a minimum of three days per week in the office, which will be set by your manager. Employees are responsible for maintaining compliance with hybrid work policies.
Scheduled Weekly Hours
40
Equal Employment Opportunity
Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to veteran status, disability or other legally protected characteristics.

Principal - Cybersecurity Audit, Risk & Governance Architect – AI & Emerging Tech

Employer job description

Key Responsibilities:

Benefits and Compensation

About this listing