The Sr. Instructional Designer (Sr. ID) will work with the ISC2 Education team, subject matter experts, external vendors, and member volunteers to develop purposeful and quality learning experiences and materials. | | This role is primarily responsible for the design of instructional content for all deliverables; working with content team members to influence the creation of information to be taught and organized into logical, instructional patterns that are appropriate for the culture and level of expertise of the learners. Responsible for delivering learning solutions at the highest level of complexity which includes high profile strategic initiatives and online and in-person education for cybersecurity professionals. | | **This position is not available to residents of California**.
Responsibilities
- Drives innovative learning design approaches utilizing effective instructional design strategies and adult learning principles to facilitate the design, development and production of experiences that best serve the learning needs and preferences of the defined audience(s) | - Influences the creation of course statements and analysis documents that communicate the scope of work for learning projects | - Manages subject matter experts and third-party providers to support the development of a variety of interactive and innovative learning solutions that are high quality, personalized, streamlined, and targeted, on time and on budget, that align with the overarching enterprise learning and assessment strategy | - Collaborates with the multimedia and other development teams to develop and deliver highly engaging and interactive learning assets that reflect best practices in learner and user experience and adult learning theory | - Leads and collaborates with team members, SME’s, instructors, and other relevant stakeholders to evaluate learning and ensure updates or revisions are implemented in accordance with instructional design best practices and current learning preferences | - Aides team professional development on technology-specific and instructional design best practices and modern learning preferences | - Researches and identifies internal and external resources for instructional material development and learner materials | - Reviews and revises course content designs accordingly to promote and ensure quality experiences | - Remains knowledgeable and proficient in best practices, strategies, tools, and current preferences in curriculum and learning design and development | - Performs miscellaneous duties as assigned
The PMO Processes & Tools Specialist will support the execution and operational effectiveness of the Project Management Office (PMO) by enabling standardized project management practices, ensuring compliance with the Secure Software Development Lifecycle (SSDLC), and driving consistency across tools, processes, and reporting. This role partners closely with Project Managers, Information Security, Engineering, and business stakeholders to embed governance, improve delivery quality, and provide actionable visibility into project performance. | | The PMO Processes & Tools Specialist will play a key role in maintaining PMO frameworks, administering project management tools, and supporting KPI tracking and reporting. This role ensures that projects not only follow established standards—but also align with security requirements and deliver measurable outcomes across the organization. | | This role requires strong attention to detail, coordination across multiple workstreams, and the ability to operate effectively in a fast-paced, structured PMO environment. | | **This position is not available to residents of California**.
Responsibilities
- Enable and reinforce standardized project management practices, templates, and governance processes across the PMO. | - Support compliance with the Secure Software Development Lifecycle (SSDLC) by partnering with Information Security and delivery teams to ensure required controls, checkpoints, and documentation are embedded in project execution. | - Administer and maintain PMO tools and platforms (e.g., project portfolio management, work tracking, reporting tools), including user access, configuration, optimization, and vendor management. | - Manage the evaluation, selection, and onboarding of new project and portfolio management tools, aligning with organizational needs and PMO standards. | - Facilitate consistent project intake, tracking, and status reporting processes to ensure data integrity and transparency. | - Collect, analyze, and maintain PMO Key Performance Indicators (KPIs) to track delivery health, adoption of standards, and organizational performance. | - Develop and maintain dashboards and reports that provide clear visibility into project status, risks, dependencies, and outcomes. | - Support audit and compliance activities by ensuring projects adhere to established governance and security requirements. | - Collaborate with Project Managers and stakeholders to identify process gaps, recommend improvements, and drive continuous enhancement of PMO capabilities. | - Provide guidance and support to project teams on PMO standards, tools, and reporting expectations. | - Assist with preparing executive-level communications, including status reports and performance insights. | - Maintain documentation of PMO processes, standards, and tool usage guidelines. | - Perform miscellaneous duties, as assigned.
As Sales Enablement Manager, your primary responsibility is to for provide quality, cost effective ISC2 Sales Learning and Development curriculum to your assigned region, including follow-up programming to improve the application of the learning back at the participant’s office and participation in the planning of the course curriculum. You will also partner with sales leaders and ISC2 Learning and Development on initiatives that have an ISC2 Sales learning and development component, or impact. | | **This position is not available to residents of California**.
Responsibilities
- Lead, coach, and develop a team responsible for sales enablement, customer education, Salesforce training, and business process documentation. | - Develop the Sales Training and Education strategy which supports the delivery of ISC2 business and sales priorities and meets operational regional requirements, ensuring that the best commercial outcome is delivered from the resources available. | - Set up, prepare for, and facilitate assigned sales courses from the sales course curriculum, ensuring that participants have an excellent quality learning experience and leave with an understanding of how to apply the program concepts within the context of ISC2. | - Ensure all sales colleagues, both new and existing, are trained to the highest standards of ISC2 sales excellence. | - Contribute to the development of a detailed induction course for all new sales recruits with relevant supporting manuals including common sales processes such as forecasting, ensuring skills are maximised to drive sales and enhance revenue. | - Assist Supervisors/Managers/Sales Support with the transition of new recruits onto the sales floor or field sales, and plan their ongoing development needs. | - Coach sales managers on external and internal sales processes as they review the processes with their team members. | - Consult with regional sales leaders and the corporate sales training team about special projects or external consulting needs where the sales Learning and Development team can support desired organizational changes and development. Provide best practice advice and programming consistent with our sales course offerings and leadership principles. | - Deliver classroom, e-learning, and blended training in the region. | - Deliver internal sales process methodologies training such as sales forecasting and CRM training, and deliver selected external professional sales process methodologies such as Miller Heiman Sales Training. | - Contribute to overall sales training curriculum design, that meets the strategic needs of ISC2, as well as a colleague curriculum that enhances selected interpersonal skills using courses that are complementary to our other offerings and that can be interspersed among the core leadership L&D programming. | - Interpret sales skills assessments and review the sales skills assessment results with individuals and their managers, and actively participate in follow up activities to demonstrate skills learned. | - Review the effectiveness of the provision of sales training against ISC2 requirements, in terms of the appropriateness, quality and level of that provision. Suggest revisions to existing sales courses, and design presentations and short courses from scratch for project work and consulting with sales leaders on regional issues. | - Enable knowledge sharing and cooperation between sales enablement and other internal teams and departments. | - Bridge gaps between sales and other departments to ensure alignment with marketing, product, and customer support. | - Facilitate communication within the sales enablement team and keep stakeholders informed about initiatives. | - Complete train-the-trainer external sales training and successfully become certified to facilitate the courses ISC2 decides to present in-house. | - Perform miscellaneous duties, as assigned.
The Business Process Specialist is responsible for documenting, maintaining, and improving organizational processes to ensure consistency, efficiency, and compliance across the business. This role partners with stakeholders to create and maintain standard operating procedures (SOPs), process maps, workflows, templates, and related documentation. The position also serves as the coordinator and process owner for selected operational workflows, including the contractor engagement lifecycle, ensuring processes are executed consistently and effectively across departments. | | **This position is not available to residents of California**.
Responsibilities
Process Documentation | - Develop and maintain process documentation, SOPs, workflow diagrams, job aids, and templates. | - Establish documentation standards and version control practices. | - Maintain a centralized repository of process documentation. | - Ensure documentation remains current and reflects operational changes. | Contractor Process Administration | - Coordinate the contractor engagement process from request through offboarding. | - Maintain process documentation, forms, and approval workflows related to contractor engagements. | - Partner with HR, Finance, Legal, Procurement, and hiring managers to ensure process adherence. | - Track contractor requests, renewals, extensions, and offboarding activities. | - Identify opportunities to simplify and improve the contractor experience while maintaining compliance. | Process Improvement | - Gather feedback from stakeholders on process effectiveness. | - Identify inefficiencies and recommend improvements. | - Participate in projects involving workflow redesign, automation, and operational enhancements. | - Support implementation of new processes and procedural updates. | Knowledge Management | - Organize and maintain business process documentation and related resources. | - Support onboarding by ensuring process information is accessible and easy to understand. | - Promote consistent adoption of documented procedures throughout the organization. | | Miscellaneous | - Perform miscellaneous duties, as assigned.
The Customer & Salesforce Training Specialist is responsible for designing, developing, and delivering training programs that drive customer success, product adoption, and effective use of Salesforce across the organization. This role serves as the primary resource for customer education and Salesforce training, partnering with Sales, Customer Success, Marketing, Operations, and Technology teams to create engaging learning experiences for both external customers and internal sales teams. | The ideal candidate combines strong facilitation skills, Salesforce expertise, and a passion for helping others learn. They will develop scalable training programs, create supporting documentation, and serve as a trusted advisor to customers and employees seeking to maximize the value of Salesforce-enabled processes and solutions. | **This position is not available to residents of California**.
Responsibilities
Customer Education | - Design, develop, and deliver customer-facing education programs, webinars, workshops, and virtual learning experiences. | - Create engaging training materials, user guides, knowledge articles, instructional videos, and job aids. | - Partner with Customer Success and Sales teams to identify customer learning needs and adoption opportunities. | - Conduct onboarding and ongoing education sessions that support successful customer engagement and utilization. | - Gather customer feedback and continuously improve training content and delivery methods. | Salesforce Training | - Serve as the subject matter expert for Salesforce training initiatives. | - Deliver Salesforce training programs for internal employees and external users. | - Develop learning materials focused on system navigation, business processes, reporting, dashboards, and best practices. | - Develop learning materials focused on system navigation, business processes, reporting, dashboards, and best practices. | - Support user adoption of new Salesforce features, enhancements, and process changes. | - Maintain a library of Salesforce training resources and documentation. | Sales Enablement | - Support onboarding and development of sales team members through structured learning programs. | - Deliver training on sales processes, lead management, opportunity management, pipeline hygiene, and Salesforce best practices. | - Collaborate with Sales Leadership to identify skill gaps and training opportunities. | - Create sales playbooks, job aids, quick-reference guides, and enablement resources. | - Reinforce consistent sales methodologies and process adherence across the organization. | Content Development & Knowledge Management | - Develop and maintain learning curricula, certification pathways, training schedules, and educational content. | - Ensure training materials remain accurate and aligned with current business processes and system functionality. | - Collaborate with subject matter experts to create specialized training content. | - Maintain centralized repositories for learning materials and documentation. | Measurement & Continuous Improvement | - Track training participation, engagement, and effectiveness metrics. | - Analyze learner feedback and adoption data to identify improvement opportunities. | - Recommend enhancements to training delivery, content, and learning strategies. | - Prepare reports and insights for stakeholders regarding program performance and utilization. | Miscellaneous | - Perform miscellaneous duties, as assigned.
The Sales Operations Analyst will act as a liaison working with the ISC2 Sales, Marketing, PMO, Legal, Finance and Professional Development teams to help process sales deliverables for the B2B, Direct Sales, Partnerships and Sponsorship Sales Team covering the NAR and LATAM regions. This person must achieve an in-depth knowledge of ISC2 certification and training programs in order to effectively support the sales team and processes. | | **This position is not available to residents of California**.
Responsibilities
Incumbent will be one of a team of subject-matter expert for multiple processes for NAR/LATAM and the SMB, B2B, OTP, IAP, Government and Sponsorship channels, including: | - Reporting and Analysis of Data Quality and Reconciliation, Leads, Account Profiles, Pipeline, Sales Cycle, GTM metrics, eCommerce, and other reporting objects. | - Reporting and cleanup of data in the Salesforce system: identifying incomplete data, duplicates, etc. | - Supporting 3rd Party System for sales with regards to Zoominfo, GovWin, LinkedIn Sales Navigator, and other systems as they arise. | - Assisting in the processing and fulfillment of orders by ensuring orders and financial documentation are accurate. | - Supporting sales reps by communicating and assisting with completion of other department’s requirements forms, templates, etc. (finance, education). | - Performing project management of tenders and bidding processes within the specified region. | - Communicating with students for class transfers, cancellations and follow up with related administrative duties to close the loop on these items | - Supporting with the assessment of opportunity creation metrics for individual sales team members; to ensure accurate Salesforce pipeline entries. | - Owning responsibility for posting schedules for ISC2 and OTP classes/trainings. | - Performing miscellaneous duties, as assigned.
The primary objective of the Customer Experience Associate (CEA) is to project a professional image and provide excellent customer experience in all communications and interactions. This is a key role within the organization as you are the face and voice of our customers and our Human Brand. You are the front line of support for our customers answering the their questions and enquires to ensure satisfaction with our products, and services, and (when applicable) actively promoting new services. This is not a conventional call center role with the focus on customer experience as opposed to handling time. With this in mind, the CEA must be passionate about customer experience and providing world-class service to our customers to achieve both individual and company objectives. This is a remote role. | | **This position is not available to residents of California**.
Responsibilities
- Provide a high-quality experience to our customer at all times, through multiple communication channels achieving designated KPI’s associated with the role. | - Actively promote products and services to our customers, explaining products and making recommendations based on customer driven information. | - Actively seek opportunities to reduce customer effort and friction to improve customer satisfaction and drive loyalty. | - Manage day to day contacts: | - Deliver accurate, professional and timely support to customers during the examination and education registration process and strive to achieve first time resolution on every contact. | - Resolve customer concerns through the case management system; create cases for each contact handled. | - Assist customers and candidates with items such as: password resets; contact or profile change requests; “how-to” issues concerning website use; certification process and renewal related issues/inquires; extensions; etc. | - Process payments for annual maintenance fees and diagnoses payment errors. | - Register customers for seminars. | | - Multitask through multiple web applications: Case Management System, Live Person Agent Desktop and IntelliVUE, etc. | - Recognize, document, and inform the regional manager regarding trends in customer correspondence. | - Escalate complex inquires / requests to subject matter experts. | - Carry out effective outreach to customers as required. | - Assist CPE Auditor with non-complex audits and mass continuing professional education (CPE) credits entries. | - Perform miscellaneous duties as assigned.
The Vice President, Communications, Marketing, & E-Commerce is a senior leader role, responsible for shaping and executing ISC2’s global communications, marketing, and ecommerce strategies. As a member of the leadership team, the incumbent will drive integrated corporate communications, public relations, marketing, creative, content, ecommerce, and web strategies that advance organizational priorities and strengthen ISC2’s brand and influence. The incumbent will partner closely with internal leaders, members, volunteers, and external stakeholders to elevate thought leadership, advocacy, philanthropic initiatives, and crisis communications. This role requires a proven leader with deep experience building and leading high-performing global teams and delivering measurable impact through brand, media, and communications programs. | | **This position is not available to residents of California**.
Responsibilities
- Provide enterprise leadership for ISC2’s global corporate communications and stakeholder engagement strategy, ensuring alignment with organizational mission, strategy, and long‑term objectives. | - Establish and lead integrated internal and external communications frameworks encompassing corporate communications, public relations, thought leadership, advocacy, crisis communications, and executive positioning. | - Provide enterprise oversight of the organization’s physical, ecommerce, and online marketing strategies to articulate a compelling value proposition, strengthen brand equity, and drive sustainable growth. | - Direct enterprise marketing, content, brand, creative, digital, web, and social media strategies to strengthen market presence, reputation, and engagement across members, volunteers, candidates, and customers. | - Serve as a principal advisor to executive leadership on communications strategy, reputational risk, and external positioning; act as an organizational spokesperson as required. | - Build and sustain strategic relationships with global media, industry leaders, volunteers, and key stakeholders to elevate ISC2’s influence and voice within the cybersecurity ecosystem. | - Partner with senior leaders across the organization to ensure consistent messaging, aligned execution, and an integrated, high‑quality stakeholder experience. | - Lead, develop, and manage a diverse, high‑performing global organization; establish clear accountability, succession planning, and talent development practices. | - Oversee financial planning, budget management, resource allocation, and third‑party partnerships; drive operational efficiency and continuous improvement across the function. | - Represent ISC2 externally to advance brand credibility, public trust, and organizational impact. | - Perform miscellaneous duties, as assigned.
The Security Engineer, Penetration Testing is a dual-function role responsible for both executing offensive security assessments and building the defensive engineering controls that harden ISC2’s environment. The role leads authorized penetration testing across ISC2’s applications, networks, and cloud infrastructure while also owning security engineering work — including security architecture review, tooling, automation, and control implementation — that translates findings into lasting improvements. This position works closely with the Security and Technical Operations team and collaborates across IT, engineering, and product to continuously strengthen ISC2’s security posture. The role plays a critical part in supporting ISC2’s ISO/IEC 27001:2022 ISMS program, providing both evidence of technical control effectiveness and direct input into risk treatment. | | **This position is not available to residents of California**.
Responsibilities
Penetration Testing | - Plan, execute, and document internal and external penetration tests against ISC2 applications, networks, cloud environments, and infrastructure. | - Perform vulnerability assessments and validate findings to distinguish genuine risks from false positives. | - Conduct web application, API, mobile, and network vulnerability assessments using industry-standard methodologies (OWASP, PTES, OSSTMM). | - Perform social engineering assessments, including phishing simulations and physical security testing as authorized. | - Produce clear, actionable written reports detailing findings, risk ratings, evidence, and remediation recommendations tailored to both technical and executive audiences. | - Support red team exercises and adversary simulation activities to test detection and response capabilities. | - Develop andmaintain the penetration testing program, including scope definitions, rules of engagement, and testing schedules. Move towards a continuous test mindset and method. | - Coordinate with third-party security vendors for external assessments and bug bounty program management where applicable. | Security Engineering | - Own remediation follow-through: translate pen test findings into security engineering work items,validate fixes, and track resolution to closure in Jira Service Management. | - Design and implement security controls across ISC2’scloud and on-premises environments, including hardening configurations for Azure, Okta, SentinelOne, CheckPoint, and F5 XD. | - Participate in security architecture and design reviews for new systems, integrations, and third-party products; provide security requirements and risk acceptance recommendations. | - Develop and maintain security automation scripts and tooling to improve detection coverage, reduce manual effort in assessment workflows, and support continuous monitoring. | - Support the Secure Software Development Lifecycle (SSDLC), including security requirements definition, code review support, and pre-deployment security validation. | - Maintain awareness of emerging vulnerabilities, exploits, and threat actor TTPs; operationalize threat intelligence into actionable hardening and detection improvements. | - Support ISC2’s ISO/IEC 27001:2022 ISMS by providing technical evidence and input for Annex A controls spanning vulnerability management (A.8.8), secure development (A.8.25–A.8.29), and technical review (A.8.29). | - Miscellaneous duties as assigned.
The Sr. Salesforce Developer is a senior technical contributor responsible for designing, developing, integrating, deploying, and supporting scalable Salesforce solutions across Sales Cloud, Service Cloud, Experience Cloud, CPQ, and the Salesforce Platform. | | The incumbent combines deep hands-on expertise in Apex, Lightning Web Components (LWC), Flows, APIs, integrations, source control, and CI/CD practices with a strong understanding of Salesforce governance, security, and release management. The role is accountable for delivering production-ready solutions, improving engineering quality and platform reliability, and driving continuous modernization and optimization initiatives. | | **This position is not available to residents of California**.
Responsibilities
- Design, develop, test, deploy, and maintain scalable Salesforce solutions using Apex, Lightning Web Components (LWC), Flows, SOQL/SOSL, Platform Events, and related Salesforce platform technologies. | - Build and support enterprise integrations between Salesforce and platforms such as MuleSoft, CommerceTools, Stripe, Sitecore, Azure services, and other third-party applications using REST, SOAP, Platform Events, and middleware patterns. | - Establish, follow, and promote development standards, code quality practices, security controls, and platform governance requirements. | - Conduct peer code reviews and ensure solutions adhere to Salesforce best practices, architectural standards, release criteria, and operational support expectations. | - Own delivery across the full Software Development Lifecycle (SDLC), including technical design, development, unit testing, integration testing support, deployment readiness, production support, and continuous improvement. | - Use Git-based source control, branching strategies, pull requests, and CI/CD pipelines (e.g., Copado or equivalent tools) to support reliable and repeatable deployments. | - Participate actively in Agile delivery processes, including backlog refinement, sprint planning, estimation, standups, reviews, and retrospectives, while meeting sprint commitments and deployment timelines. | - Troubleshoot complex application, integration, deployment, and production issues; perform root cause analysis; and implement durable corrective and preventative solutions. | - Monitor platform performance, identify technical debt, and drive optimization, refactoring, and modernization initiatives that improve scalability, maintainability, and reliability. | - Create and maintain technical documentation, design specifications, integration documentation, runbooks, knowledge articles, and implementation guides. | - Evaluate new Salesforce capabilities, releases, and ecosystem technologies and recommend adoption opportunities that improve business value, developer productivity, or platform effectiveness. | - Support platform security, compliance, audit readiness, data governance, and change management initiatives in partnership with security, architecture, and operational teams. | - Provide technical guidance and mentorship to junior and mid-level Salesforce developers and contribute to continuous improvement of engineering practices across the team. | - Perform miscellaneous duties, as assigned.
The Senior Project Manager will be responsible for leading and driving the successful execution of large-scale, complex IT and strategic initiatives across the organization. This role will own projects from initiation through implementation and closeout, ensuring they are delivered on time, within scope, on budget, and aligned to business priorities. | | The incumbent will lead cross-functional teams, drive alignment across stakeholders and executive sponsors, and proactively manage risks, issues, dependencies, and competing priorities. This individual will facilitate Steering Committee meetings, lead specialized project meetings, and present project updates, recommendations, and key decisions to executive leadership and company-wide forums, leveraging deep expertise in project management tools, methodologies, governance, and executive communication. Experience in digital transformation, change management, process improvement, and technical platform migration projects is essential. | | **This position is not available to residents of California**.
Responsibilities
- Lead and oversee complex technical and strategic initiatives using Agile, Waterfall, or hybrid methodologies, and provide clear, decision-oriented reporting on progress, risks, dependencies, and emerging issues to stakeholders and executive leadership. | - Own delivery of projects through successful completion, ensuring alignment to scope, timelines, budget, business objectives, and organizational priorities. | - Proactively identify, assess, and mitigate risks, issues, and dependencies, developing mitigation and escalation strategies in collaboration with project teams, stakeholders, and executive sponsors. | - Drive prioritization and sequencing of work in alignment with business goals, strategic objectives, and resource constraints, partnering closely with cross-functional teams to achieve desired outcomes. | - Lead and influence cross-functional teams to foster accountability, high performance, collaboration, and strong execution across multiple workstreams. | - Build strong partnerships across teams, peers, senior leadership, and executive stakeholders to establish trust, drive alignment, and influence decisions and outcomes. | - Contribute to and help advance project management practices, governance models, and business process improvements as part of continuous improvement initiatives. | - Lead high-visibility digital transformation, process improvement, and technical platform migration initiatives, ensuring alignment with organizational strategy, change impacts, and measurable business outcomes. | - Plan, facilitate, and manage Steering Committee meetings and governance forums for complex initiatives, ensuring alignment, decision-making, and accountability among executive stakeholders. | - Lead specialized and ad-hoc forums as needed to drive project success, resolve cross-functional issues, and provide executive-level updates, recommendations, and escalation support. | - Present project health, key decisions, risks, outcomes, and strategic recommendations confidently to executive teams, company-wide town hall meetings, and other leadership forums. | - Mentor less experienced project managers or team members on project delivery practices, tools, and governance expectations. | - Perform miscellaneous duties, as assigned.
The AI Architect will provide strategic and technical leadership for the organization’s AI ecosystem by translating business priorities into scalable, secure, and governed solution designs. This role is responsible for defining and documenting AI use cases and target delivery models, establishing the current and future-state AI architecture across the enterprise landscape, evaluating build-versus-buy options, and guiding proof-of-concept strategies and reusable implementation patterns. The position also drives operational maturity by embedding monitoring, feasibility of telemetry across the AI landscape, observability, governance, and change management practices that enable AI capabilities to scale effectively across delivery teams while supporting reliable, compliant, and business-aligned adoption. | | **This position is not available to residents of California**.
Responsibilities
- Define and document enterprise AI use cases, business value drivers, and target delivery models that align with organizational goals and objectives. | - Develop and maintain current-state and target-state AI architecture across the enterprise, including platforms, data flows, integration patterns, security controls, and governance requirements. | - Lead build-versus-buy evaluations for AI platforms and services, and provide appropriate recommendations. | - Establish reusable AI architecture patterns, reference models, and implementation standards to support consistent delivery. | - Guide proof-of-concept and pilot strategies to validate solution feasibility, technical design, business value, and operational readiness before broader adoption. | - Drive scalable AI operations by embedding monitoring, telemetry, observability, governance, and change management practices across the AI lifecycle. | - Partner with architecture, engineering, data, security, product, and business stakeholders to translate requirements into secure, reliable, and governed AI solutions. | - Define key deliverables for the function, including AI architecture models, proof-of-concept strategies, and delivery patterns that accelerate enterprise adoption. | - Perform miscellaneous duties, as required.
The AI Security Engineer is responsible for identifying, assessing, and mitigating security risks introduced by artificial intelligence and machine learning systems across ISC2’s technology estate. This role sits at the intersection of offensive security, application security, and data science — evaluating AI/ML pipelines, large language model (LLM) integrations, and AI-powered products for adversarial threats, model vulnerabilities, and supply chain risks. The AI Security Engineer partners closely with the Security and Technical Operations team, engineering, and product stakeholders to embed security controls throughout the AI development lifecycle and contributes directly to ISC2’s ISO/IEC 27001:2022 ISMS program and broader cybersecurity governance objectives. | | **This position is not available to residents of California**.
Responsibilities
- Perform security assessments of AI/ML systems, including threat modeling, adversarial testing, and of LLM-based applications and AI-powered products and services integrated into ISC2’s products and operations. | - Evaluate AI/ML implementations for vulnerabilities including prompt injection, jailbreaking, model inversion, data poisoning, membership inference, and adversarial example attacks. | - Define and implement secure AI development lifecycle (AI-SDLC) standards, including secure model training, data governance, agent, and other access controls, and model deployment guardrails. | - Conduct third-party AI vendor and model supply chain risk assessments; evaluate API-based AI services (e.g., OpenAI, Anthropic,Claude Code, Azure OpenAI) for data handling, privacy, and security posture. | - Partner with engineering and product teams to review AI feature designs, conduct pre-deployment security reviews, and provide risk acceptance recommendations for AI-related SSDLC exceptions. | - Monitor the evolving AI threat landscape;maintain awareness of emerging attack techniques, regulatory developments (EU AI Act, NIST AI RMF), and industry best practices (OWASP Top 10 for LLMs, MITRE ATLAS). | - Support ISC2’s ISO/IEC 27001:2022 ISMS by mapping AI risk controls to applicable Annex A requirements (including A.8.25 through A.8.29) and contributing AI-specific risk treatment plans to the organizational risk register. | - Develop and deliver internal training and awareness content on responsible AI use, AI-specific threats, and secure integration patterns for developers and business stakeholders. | - Contribute to ISC2’s thought leadership in AI security by supporting content, certification, and research initiatives aligned with the organization’s mission. | - Perform miscellaneous duties as assigned.