AI Security Operations Specialist
- Saxon Global Inc.
7 Hours Ago
NA
C2C
Dallas-TX
7-10 Years
Required Skills: GRC, cyber security, AI
Job Description
Must Have :
- 7+ years of progressive experience with specific focus on GRC, cyber security, and AI
- Security operations, security program coordination, and/or technical security PM experience
- AI and security knowledge (MCP servers, approved vs. unapproved tech)
- Strong organization and follow-through on ongoing remediation work
- Clear communication with both technical teams and end users
- Onsite 4 days a week in Dallas or Denver
About the Role
Join Schwab's AI Security Governance team, which sets the standards, controls, and security requirements for how AI is used across the company. This role focuses on Security for AI, which means helping the business adopt AI safely. You'll run the day-to-day process for finding and fixing unapproved AI technology, working between security engineering, governance, and end users. This is a security operations and program role. It is not an AI engineering role.
Key Responsibilities
- Act as the main contact between security engineering (including CrowdStrike), AI security engineering, the AI governance team, and Schwab end users.
- Review findings from security engineering against the approved AI and MCP inventory.
- Spot unapproved AI technology, including MCP servers, AI websites and tools, and local AI models.
- Reach out to affected users and explain:
- What was found
- Why it isn't approved
- Which policy or governance requirement applies
- How to register it or get it approved
- Guide users through the "front door" process for registering MCP servers and other AI technology.
- Track findings, communications, remediation, and status through to resolution.
- Send technical challenges or disputes to the right technical or governance team.
- Run the established remediation process consistently and keep it organized.
What You Bring
- Background in security operations, security program or project coordination, or technical security project management.
- Enough technical knowledge to:
- Understand what MCP servers are, along with basic AI and security terms
- Understand the scope of findings from security engineering
- Tell approved technology apart from unapproved technology
- Explain the general security reason something was blocked
- Strong organization and follow-through, with the ability to manage ongoing operational work, not just produce documentation.
- Clear communication with both technical security teams and non-technical business users.
- Comfort working where security engineering, governance, operations, and end users meet.
Nice to Have
- GRC or security governance experience.
- Exposure to enterprise AI governance or AI usage policies.
- Familiarity with CrowdStrike or similar security tools.
