Bounteous is a global AI Services firm where agentic engineering and human experience converge to deliver transformative business outcomes for the enterprise. We help organizations design, build, and scale AI-driven products, platforms, and processes. With more than 5,000 team members worldwide, Bounteous delivers AI that sticks, powering adoption and outcomes that move organizations from experimentation to true transformation. Bounteous is backed by New Mountain Capital, a New York-based growth-oriented investment firm that emphasizes business building.
Job Title: AI Risk and Security Architect
Location: Scottsdale, Arizona (Onsite - 5 Days/Week)
Job Type: Fulltime
Domain: Retail
About the Role:
Skills and Experience Expectations
Senior AI governance and risk management professional with 3–5 years of relevant hands-on experience in AI governance, risk management, responsible AI, policy execution, risk registers, control evidence, audit readiness, model or agent lifecycle governance, privacy and regulatory analysis, and executive risk reporting.
Required skills include NIST AI RMF, ISO/IEC 42001, model risk management, privacy analysis, and regulatory analysis.
Primary Responsibilities
Support AI risk intake, assessment, classification, mitigation tracking, approval evidence, policy alignment, AI inventory quality, governance reporting, escalation preparation, and coordination with security, privacy, legal, architecture, and business stakeholders.
Required Qualifications
Education:
- Bachelor’s degree in computer science, Information Systems, Engineering, or related discipline.
- Equivalent work experience may be considered.
Information Security Responsibilities
Promote and enforce awareness of key information security practices, including acceptable use of information assets, malware protection, and password security protocols
Identify, assess, and report security risks, focusing on how these risks impact the confidentiality, integrity, and availability of information assets
Understand and evaluate how data is stored, processed, or transmitted, ensuring compliance with data privacy and protection standards (GDPR, CCPA, etc.)
Ensure data protection measures are integrated throughout the information lifecycle to safeguard sensitive information
