Huron is redefining what a global consulting organization can be. Advancing new ideas every day to build even stronger clients, individuals and communities. We’re helping our clients find new ways to drive growth, enhance business performance and sustain leadership in the markets they serve. And, we’re developing strategies and implementing solutions that enable the transformative change they need to own their future.

As a member of the Huron corporate team, you’ll help to evolve our business model to stay ahead of market forces, industry trends and client needs. Our accounting, finance, human resources, IT, legal, marketing and facilities management professionals work collaboratively to support Huron’s collective strategies and enable real transformation to produce sustainable business results.

Join our team and create your future.

As AI adoption accelerates across the firm, an AI Governance Sr. Associate is needed to identify and refine the security controls, governance processes, and risk assessment practices necessary to ensure Huron leverages AI technologies in a manner that is consistent with our existing commitments to Privacy and Security.

Description

This individual is responsible for developing a scaled and consistent approach to: AI security controls, governance processes, risk assessments, and standards. The role requires close coordination with stakeholders across IT, Legal, Procurement, and the business units to ensure AI initiatives are evaluated for risk early, governed consistently, and supported with clear, practical standards and safeguards. The individual should be comfortable operating in an evolving regulatory and technical landscape, translating emerging AI risk concepts into practical governance structures that all stakeholders can rapidly adopt.

Key Responsibilities

AI security controls

·       Develop and maintain security controls that are consistent with existing Huron standards specific to AI, including but not limited to agents, systems, models, AI-enabled tools, data handling, access, and use.

·       Partner with IT and AI Business Teams to embed security requirements into AI development, procurement, and deployment workflows.

·       Evaluate third-party AI tools and vendors for security and data handling risk, in coordination with the third-party risk function.

·       Monitor the AI threat landscape and recommend control updates as new risks and techniques emerge.

 

Governance processes and standards

·       Develop and maintain AI governance processes, including intake, approval, and ongoing oversight for new AI use cases.

·       Draft and maintain AI security standards, policies, and playbooks, keeping them current with regulatory and technical change.

·       Support the AI Governance Committee or designated AI oversight structure, coordinating review cadence and documentation.

·       Develop AI governance metrics and provide regular reporting on program maturity and open items.

Risk assessments

·       Conduct risk assessments of new and existing AI use cases, evaluating data sensitivity, and business impact.

·       Identify and track remediation items arising from AI risk assessments, driving them to closure, with business and technical owners.

·       Support due diligence on AI features embedded in existing or prospective vendor products.

·       Help ensure AI risk assessments align with applicable regulatory, privacy, and industry requirements.

Stakeholder coordination

·       Act as a point of contact for business units and technical teams seeking guidance on AI security and governance requirements.

·       Communicate AI risk findings, standards, and process requirements clearly to both technical and non-technical audiences.

·       Collaborate with Legal and Compliance on AI-related regulatory obligations and disclosure requirements.

·       Build relationships across the business to help AI governance keep pace with adoption while supporting compliant innovation.

Qualifications

·       3 to 5+ years of experience in information security, GRC, or risk management, with meaningful exposure to AI, machine learning, and/or data governance.

·       Undergraduate degree required, preferably in Information Security, Computer Science, Data Science, or a related discipline.

·       ISO 42001 Lead Auditor/ Lead Implementor Certification

·       Working knowledge of AI risk concepts (model risk, data lineage, bias, explainability) and how they map to security controls.

·       Familiarity with emerging AI governance frameworks and regulations (e.g., NIST AI RMF, ISO 42001, ISO/IEC 27090:2026, EU AI Act) and the ability to translate them into practical standards.

·       Strong written and verbal communication skills, with the ability to explain technical AI risk concepts to business stakeholders.

·       Experienced in designing and implementing governance frameworks in dynamic, fast-paced environments while maintaining strong risk oversight.

 

Preferred Skills

 

·       Security or AI governance certification, such as CRISC or AIGP, AAIA, AAISM, AAIR

·       Experience standing up or maturing a governance program from an early stage.

·       Foundational knowledge of Application Security (App Sec) frameworks (e.g. OWASP, NIST SSDF, CIS) as well as ability to integrate Secure-System Lifecycle and Design into AI workflows.

·       Familiarity with GRC or risk management platforms used to track assessments and remediation items.

·       Analytical problem-solving skills, including the ability to synthesize technical risk into a format that supports leadership decision-making.

Position Level

Senior Associate

Country

India