New opportunity

Senior Director AI Security

Ryder System · Boston, United States

About this role

The Senior Director AI Security reports to Ryder’s Chief Information Security Officer and establishes, leads, and matures the enterprise AI Security program. The role sets the strategy for securing AI technologies while enabling responsible adoption across the business, including generative AI, large language models, AI agents, machine learning platforms, and autonomous systems.

Responsibilities

Develop the AI security strategy, operating model, governance framework, and multi-year roadmap. Establish policies, acceptable-use standards, reference architectures, and secure development requirements.
Lead model governance, AI inventory, third-party assessments, threat modeling, regulatory compliance, and enterprise AI risk assessment. Oversee security architecture reviews, secure design approvals, and assessments for new AI initiatives.
Create AI security metrics and executive dashboards; represent Information Security on AI governance committees. Monitor emerging threats, adversarial techniques, vulnerabilities, regulations, and industry practices.
Recruit, mentor, and lead AI security architects, engineers, and specialists. Manage budgeting, planning, and operations, and partner with architecture, engineering, data, legal, privacy, procurement, risk, audit, and business leaders.

Required qualifications

Bachelor’s degree in computer science, information security, engineering, data science, or a related field; 10 or more years of progressive cybersecurity leadership; 5 or more years leading security architecture or engineering organizations.
3 or more years designing, implementing, and securing AI/ML; 2 or more years in AWS, Google Cloud Platform, and/or Microsoft Azure cloud security configuration and management; and 2 or more years in application security emphasizing AI/ML.
Deep knowledge of LLMs, generative AI, model lifecycles, data privacy, model governance, and adversarial AI/ML. Advanced project management, multitasking, organizational skills, and knowledge of relevant NIST, ISO, and OWASP risk and security frameworks are required. CISSP is required upon hire.

Preferred qualifications include a related master’s degree and AAISM, CSSLP, or CCSP certifications, each listed with “1 Year.” The Boston, MA role requires 10–20% travel. The stated salaried pay range is $150,000–$200,000; eligibility for a bonus, commission, or long-term incentive plan may depend on the position.

For full details about this role, click “Apply on company site” to view the employer’s original posting.

Skills for this role

AI securityCybersecurity leadershipAI governanceModel governanceAI risk assessmentThreat modelingSecurity architectureApplication securityCloud securityData privacyAdversarial AIGenerative AILarge Language ModelsMachine learningAWSGoogle Cloud PlatformMicrosoft AzureNIST AI Risk Management FrameworkNIST Risk Management FrameworkNIST Privacy FrameworkNIST Cybersecurity FrameworkISO 27001ISO 42001NIST 800 SeriesOWASP GenAI Security ProjectProject managementCISSPAAISMCSSLPCCSP

Checking your profile…

Preparation suggestions, not the employer’s actual interview questions. Always check the original posting for current requirements.

Understand the role

What matters most

Build the enterprise AI security program
The role reports to the CISO and owns the AI security strategy, operating model, governance framework, and multi-year roadmap. Prepare to explain how you would sequence program decisions and measure progress.
Set standards and oversee secure design
The posting calls for policies, acceptable-use standards, reference architectures, secure development requirements, and reviews of new AI initiatives. Prepare to describe how these would guide architecture decisions across AI technologies.
Lead AI risk and model governance
Responsibilities include AI inventory, model governance, third-party assessments, threat modeling, enterprise risk assessments, and regulatory compliance. Prepare to explain how these activities would inform security decisions.
Enable adoption through executive partnership
The director represents Information Security on AI governance committees and partners with technology, data, legal, privacy, procurement, risk, audit, and business leaders. Prepare examples of aligning security decisions with business objectives through influence.
Build and run the security organization
The role includes recruiting and mentoring architects, engineers, and specialists; budgeting and operational planning; and creating executive metrics and dashboards. Prepare to discuss leadership decisions and how you would communicate program progress to executives.

Likely challenges to think through

Balancing safeguards with AI adoption
Preparation hypothesis: controls for LLMs, agents, ML platforms, and autonomous systems may need to protect data and systems without unnecessarily delaying responsible use. Prepare to explain how you would distinguish baseline requirements from risk-based review decisions.
Keeping guidance current across varied AI technologies
Preparation hypothesis: a multi-year roadmap may need adjustment as adversarial techniques, vulnerabilities, and regulations change. Prepare to describe how you would update standards and priorities while preserving a coherent enterprise approach.
Making governance actionable at enterprise scale
Preparation hypothesis: maintaining an AI inventory and reviewing models, vendors, and new initiatives could compete for a finite team's time. Prepare to discuss how you would prioritize assessments, define useful executive metrics, and make risk decisions visible to stakeholders.

Practice your answers

Technical practice

How would you build a multi-year enterprise AI security strategy and roadmap?

What to coverThe role owns the strategy, operating model, governance framework, and roadmap. Suggested preparation: explain how you would prioritize risks, assign decision rights, and balance security with responsible AI adoption.

How would you establish an AI inventory and enterprise risk assessment method?

What to coverThe posting calls for both an AI inventory and an enterprise AI risk assessment methodology. Suggested preparation: describe what you would record, how you would assess different uses, and when an initiative would require deeper review.

What controls would you apply across the AI model lifecycle?

What to coverModel governance and deep knowledge of the model lifecycle are stated expectations. Suggested preparation: discuss oversight from development or selection through deployment, monitoring, change, and retirement, including how governance decisions would be documented.

How would you threat-model an LLM application or AI agent?

What to coverThe role covers LLMs and agents and leads threat modeling while monitoring adversarial AI techniques. Suggested preparation: identify plausible misuse and failure paths, then explain how you would prioritize mitigations and test whether they work.

How would you evaluate a proposed AI system architecture for secure adoption?

What to coverThe director oversees architecture reviews, design approvals, and reference architectures; cloud security configuration is also a stated qualification. Suggested preparation: walk through a review of data flows, identities, integrations, and cloud configuration, including what would trigger a redesign or exception.

How would you translate AI security standards into secure development requirements?

What to coverThe posting calls for secure development requirements and application security with an AI/ML emphasis. Suggested preparation: explain where security checks belong in development and how you would verify that requirements remain effective after release.

How would you assess the security risk of a third-party AI offering?

What to coverThird-party AI assessments and partnership with Procurement, Legal, Privacy, and Risk Management are explicit duties. Suggested preparation: cover evidence you would request, data-handling concerns, residual-risk decisions, and trade-offs when business adoption is time-sensitive.

How would you set acceptable-use standards for generative AI while protecting data privacy?

What to coverThe role establishes acceptable AI usage standards and requires knowledge of data privacy. Suggested preparation: distinguish permitted uses from uses needing additional safeguards or approval, and explain how the standards would remain practical for business teams.

How would you use the named risk and security frameworks in AI governance?

What to coverThe posting names NIST AI RMF, other NIST frameworks, ISO 27001, ISO 42001, and the OWASP GenAI Security Project among relevant references. Suggested preparation: explain what each type of framework contributes and how you would avoid treating a framework mapping as proof that a specific AI system is secure.

What would an executive AI security dashboard show, and how would you respond to emerging threats?

What to coverThe role creates metrics and dashboards and adjusts strategy as threats, vulnerabilities, and regulations evolve. Suggested preparation: propose measures that show risk and review outcomes rather than activity alone, and explain when new information would change priorities.

Behavioural practice

Tell me about a time you built or matured a security team or program.

What to coverThe role includes recruiting, mentoring, budgeting, and leading AI security operations. Suggested preparation: use a real situation, your leadership actions, and the result; distinguish your contribution from the team's.

Describe a time you influenced business and technical leaders with different priorities.

What to coverThe posting emphasizes cross-functional partnership and injecting cybersecurity into business processes through influence. Suggested preparation: give a real situation, the actions you took to reach a workable decision, and the resulting business and security outcomes.

Tell me about a time you handled disagreement over a security design or risk decision.

What to coverThe role oversees design approvals and risk management while enabling adoption. Suggested preparation: recount a real situation, how you evaluated options and handled disagreement, and what resulted; explain any remaining risk without implying every concern was eliminated.

Describe a time you communicated a complex security risk to executive governance stakeholders.

What to coverThe director represents Information Security on AI governance committees and develops executive dashboards. Suggested preparation: use a real situation, explain how you framed the decision and evidence, and state the result.

Tell me about a time you reprioritized several security initiatives under resource constraints.

What to coverStrategic planning, budgeting, operational execution, and advanced organizational skills are stated expectations. Suggested preparation: describe the real situation, the trade-offs and actions you took, and the measurable or observable result.

Sharpen your knowledge

Topics to prepare

Enterprise AI security governance
Revision exercise: Sketch how an AI security strategy, operating model, policies, acceptable-use standards, and multi-year roadmap fit together. The posting assigns ownership of all five to this role.
AI model lifecycle and adversarial risk
Revision exercise: Map security and privacy risks across development, deployment, and operation of an LLM or AI agent, including adversarial techniques. The posting requires deep knowledge of LLMs, generative AI, model lifecycles, data privacy, and adversarial AI/ML.
Model and third-party governance
Revision exercise: Explain what an AI inventory, model governance process, and third-party assessment each contribute to an enterprise risk decision. All three are named responsibilities.
Risk and security frameworks
Revision exercise: Compare how the NIST AI Risk Management Framework, NIST Privacy Framework, NIST Cybersecurity Framework, ISO 42001, and OWASP GenAI Security Project could inform an AI security review. The posting explicitly requires advanced knowledge of relevant risk and security frameworks.
AI application and cloud security architecture
Revision exercise: Trace security considerations from an AI application through its model and cloud environment, distinguishing application controls from cloud configuration. The posting requires AI/ML application security and security configuration and management in AWS, GCP, and/or Azure.

Skills to revise

Draft a program roadmap
Suggested practice: Produce a one-page, phased AI security roadmap with governance, standards, architecture reviews, and measurable outcomes. This rehearses the strategy and multi-year planning the role will lead; the format is a preparation suggestion, not a stated requirement.
Build an AI risk assessment
Suggested practice: Create a sample assessment that records an AI initiative in an inventory, identifies model and third-party risks, and states a decision and follow-up actions. The posting calls for an enterprise AI risk assessment methodology, inventory, and third-party assessments.
Facilitate an AI threat model
Suggested practice: For a hypothetical LLM or AI-agent initiative, diagram data flows, identify adversarial and privacy risks, and prioritize mitigations. Threat modeling and assessment of new AI initiatives are explicit responsibilities.
Conduct a secure design review
Suggested practice: Review a hypothetical AI application architecture, including its cloud security configuration in one of AWS, GCP, or Azure; document approval conditions and unresolved risks. The posting specifies architecture reviews, secure design approvals, and cloud security experience.
Present executive AI security metrics
Suggested practice: Draft a sample dashboard showing inventory coverage, review status, and significant risks, then give a brief governance-committee update. The posting requires AI security metrics, executive dashboards, and representation on AI governance committees; these example measures are suggestions.
Plan team and operating priorities
Suggested practice: Outline how to prioritize work for AI security architects, engineers, and specialists, including hiring, mentoring, budgeting, and coordination with legal, privacy, procurement, and technology leaders. These are stated leadership responsibilities.

Your preparation checklist

Draft an AI security program roadmap
The role owns enterprise strategy, an operating model, governance, and a multi-year roadmap. Prepare a one-page illustrative roadmap with priorities, decision rights, staffing considerations, and measures of progress; label assumptions rather than presenting them as Ryder’s current plans.
Prepare an AI/ML security project walkthrough
Select a project you can discuss accurately. Show your role, the model lifecycle, key risks, architecture decisions, cross-functional tradeoffs, and measurable results, with confidential details removed.
Practice a secure AI design review
Sketch an illustrative review of an LLM application or AI agent. Cover data privacy, adversarial threats, application controls, cloud configuration, third-party dependencies, and criteria for approving or revising the design.
Build a sample governance and risk packet
Draft a brief AI inventory template, model-governance checkpoints, third-party assessment questions, and an enterprise risk-rating approach. Explain how relevant NIST, ISO, and OWASP guidance would inform the approach without claiming Ryder uses a particular implementation.
Prepare an executive metrics example
Create a sample dashboard for the CISO or an AI governance committee showing a few clearly defined measures, such as inventory coverage, review status, material risks, and remediation progress. Be ready to explain what decisions each measure supports.
Gather leadership and qualification evidence
Organize concise examples of leading security architecture or engineering teams, hiring and mentoring, budgeting, and influencing legal, privacy, procurement, engineering, and business partners. Separately verify the posting’s degree, experience, and CISSP-upon-hire requirements against your own records without treating preferred credentials as required.
Write targeted questions for Ryder
Ask about the AI program’s current maturity, the CISO’s priorities, how new AI initiatives enter security review, governance decision rights, team-building expectations, and the role’s stated 10–20% travel. These are questions to resolve, not assumptions about existing processes.

Availability last checked: Nov 4, 2026. Status can change after a check; confirm on the employer’s website. Report an issue · Our checking policy

KEEP EXPLORING

Similar AI jobs

Related skills and specializations in United States. Matched to this role, not your profile.

Explore more jobs

Finding similar opportunities…