AI Risk, Compliance, and Technology Readiness Lead

Job Details:

Role: AI Risk, Compliance, and Technology Readiness Lead

Location: Washington, DC 20005 (On-site with Hybrid)

Duration: 12+ Months Contract

Position Summary:

CGC is seeking an AI Risk, Compliance, and Technology Readiness Lead to assess the client s ability to adopt artificial intelligence securely, responsibly, and effectively. This position will lead the regulatory, privacy, cybersecurity, data, and technology-readiness components of the engagement. The successful candidate will evaluate the client s existing technology environment, data capabilities, security and privacy controls, regulatory obligations, and readiness to support traditional AI, generative AI, and potential agentic AI use cases.

Key Responsibilities:

• Assess the client s AI-related privacy, cybersecurity, regulatory, data-governance, and risk-management practices.

• Evaluate alignment with applicable FCC expectations, federal requirements, and organizational privacy and security obligations.

• Identify control gaps, risks, safeguards, and boundaries required for responsible and compliant AI use.

• Assess the extent to which the existing technology stack, data environment, architecture, and security controls support AI adoption.

• Evaluate AI risks involving sensitive information, personally identifiable information, third-party tools, model outputs, bias, explainability, human review, and auditability.

• Recommend risk-based AI intake, review, approval, monitoring, validation, and reporting controls.

• Evaluate technical and governance considerations related to generative and agentic AI, including monitoring, failure modes, output validation, human oversight, and consumption-based costs.

• Support the development of the target-state governance framework and three-year implementation roadmap.

• Assess the technical feasibility, security, privacy, data requirements, and constraints of proposed AI pilots.

• Contribute to executive briefings, stakeholder workshops, and final deliverables.

Required Qualifications:

• Bachelor s degree in computer science, cybersecurity, information systems, data science, engineering, or a related field.

• At least eight years of experience in enterprise architecture, cybersecurity, data governance, privacy, technology risk, AI, or related consulting.

• Demonstrated experience conducting technology, data, security, privacy, or organizational-readiness assessments.

• Strong knowledge of AI risk management, responsible AI, data protection, cybersecurity controls, and third-party technology risk.

• Familiarity with generative AI, large language models, AI lifecycle controls, model monitoring, human oversight, and output validation.

• Experience translating technical and compliance findings into actionable business recommendations.

• Strong analytical, documentation, and stakeholder communication skills.

Preferred Qualifications:

• Experience supporting federal agencies, regulated organizations, or federally funded programs.

• Knowledge of NIST AI RMF, NIST Cybersecurity Framework, NIST SP 800-series guidance, FISMA, Privacy Act considerations, and federal security practices.

• Certifications such as CISSP, CISM, CRISC, CIPP, CIPM, CGRC, AWS, Azure, or an AI governance credential.

• Experience with cloud architecture, enterprise data platforms, AI vendor assessments, or technology cost modeling.