Job Details:
Role: AI Risk, Compliance, and Technology Readiness Lead
Location: Washington, DC 20005 (On-site with Hybrid)
Duration: 12+ Months Contract
Position Summary:
CGC is seeking an AI Risk, Compliance, and Technology Readiness Lead to assess the client s ability to adopt artificial intelligence securely, responsibly, and effectively. This position will lead the regulatory, privacy, cybersecurity, data, and technology-readiness components of the engagement. The successful candidate will evaluate the client s existing technology environment, data capabilities, security and privacy controls, regulatory obligations, and readiness to support traditional AI, generative AI, and potential agentic AI use cases.
Key Responsibilities:
Assess the client s AI-related privacy, cybersecurity, regulatory, data-governance, and risk-management practices.
Evaluate alignment with applicable FCC expectations, federal requirements, and organizational privacy and security obligations.
Identify control gaps, risks, safeguards, and boundaries required for responsible and compliant AI use.
Assess the extent to which the existing technology stack, data environment, architecture, and security controls support AI adoption.
Evaluate AI risks involving sensitive information, personally identifiable information, third-party tools, model outputs, bias, explainability, human review, and auditability.
Recommend risk-based AI intake, review, approval, monitoring, validation, and reporting controls.
Evaluate technical and governance considerations related to generative and agentic AI, including monitoring, failure modes, output validation, human oversight, and consumption-based costs.
Support the development of the target-state governance framework and three-year implementation roadmap.
Assess the technical feasibility, security, privacy, data requirements, and constraints of proposed AI pilots.
Contribute to executive briefings, stakeholder workshops, and final deliverables.
Required Qualifications:
Bachelor s degree in computer science, cybersecurity, information systems, data science, engineering, or a related field.
At least eight years of experience in enterprise architecture, cybersecurity, data governance, privacy, technology risk, AI, or related consulting.
Demonstrated experience conducting technology, data, security, privacy, or organizational-readiness assessments.
Strong knowledge of AI risk management, responsible AI, data protection, cybersecurity controls, and third-party technology risk.
Familiarity with generative AI, large language models, AI lifecycle controls, model monitoring, human oversight, and output validation.
Experience translating technical and compliance findings into actionable business recommendations.
Strong analytical, documentation, and stakeholder communication skills.
Preferred Qualifications:
Experience supporting federal agencies, regulated organizations, or federally funded programs.
Knowledge of NIST AI RMF, NIST Cybersecurity Framework, NIST SP 800-series guidance, FISMA, Privacy Act considerations, and federal security practices.
Certifications such as CISSP, CISM, CRISC, CIPP, CIPM, CGRC, AWS, Azure, or an AI governance credential.
Experience with cloud architecture, enterprise data platforms, AI vendor assessments, or technology cost modeling.