AI Governance, Senior Associate

Overview

Develop and maintain AI security controls, governance processes, risk assessments, and standards so that Huron's use of AI technologies is consistent with its existing Privacy and Security commitments, working closely with IT, Legal, Procurement and business units.

What you'll do

• Develop and maintain AI security controls consistent with existing Huron standards, covering agents, systems, models, AI-enabled tools, data handling, access, and use.
• Partner with IT and AI Business Teams to embed security requirements into AI development, procurement, and deployment workflows.
• Evaluate third-party AI tools and vendors for security and data handling risk, in coordination with the third-party risk function.
• Monitor the AI threat landscape and recommend control updates as new risks and techniques emerge.
• Develop and maintain AI governance processes, including intake, approval, and ongoing oversight for new AI use cases.
• Draft and maintain AI security standards, policies, and playbooks, keeping them current with regulatory and technical change.
• Support the AI Governance Committee or designated AI oversight structure, coordinating review cadence and documentation.
• Develop AI governance metrics and provide regular reporting on program maturity and open items.
• Conduct risk assessments of new and existing AI use cases, evaluating data sensitivity and business impact.
• Identify and track remediation items arising from AI risk assessments, driving them to closure with business and technical owners.
• Support due diligence on AI features embedded in existing or prospective vendor products.
• Help ensure AI risk assessments align with applicable regulatory, privacy, and industry requirements.
• Act as a point of contact for business units and technical teams seeking guidance on AI security and governance requirements.
• Communicate AI risk findings, standards, and process requirements clearly to both technical and non-technical audiences.
• Collaborate with Legal and Compliance on AI-related regulatory obligations and disclosure requirements.
• Build relationships across the business to help AI governance keep pace with adoption while supporting compliant innovation.

What you'll need

• 3 to 5+ years of experience in information security, GRC, or risk management, with meaningful exposure to AI, machine learning, and/or data governance.
• Undergraduate degree required.
• ISO 42001 Lead Auditor or Lead Implementor Certification.
• Working knowledge of AI risk concepts (model risk, data lineage, bias, explainability) and how they map to security controls.
• Familiarity with emerging AI governance frameworks and regulations (e.g., NIST AI RMF, ISO 42001, ISO/IEC 27090:2026, EU AI Act) and the ability to translate them into practical standards.
• Strong written and verbal communication skills, with the ability to explain technical AI risk concepts to business stakeholders.
• Experienced in designing and implementing governance frameworks in dynamic, fast-paced environments while maintaining strong risk oversight.

Nice to have

• Undergraduate degree preferably in Information Security, Computer Science, Data Science, or a related discipline.
• Security or AI governance certification, such as CRISC or AIGP, AAIA, AAISM, AAIR.
• Experience standing up or maturing a governance program from an early stage.
• Foundational knowledge of Application Security (App Sec) frameworks (e.g. OWASP, NIST SSDF, CIS) and ability to integrate Secure-System Lifecycle and Design into AI workflows.
• Familiarity with GRC or risk management platforms used to track assessments and remediation items.
• Analytical problem-solving skills, including the ability to synthesize technical risk into a format that supports leadership decision-making.

Details

• Position level: Senior Associate.
• Country: India.
• Location: Bangalore India - Outer Ring Road.