Technical Expert – AI and Information Security Systems (Contract)

ascio is hiring a Technical Expert in Artificial Intelligence and Information Security Systems to support our audit, assessment and assurance work.

This role provides specialist technical expertise across AI systems, cybersecurity, cloud environments, data, machine learning and information security controls. The Technical Expert supports audit and assessment teams by interpreting complex technical environments, reviewing technical evidence and helping determine whether implemented technologies and controls meet applicable requirements.

The Technical Expert works under the direction of the audit or assessment lead and does not act as the auditor.

Responsibilities

1. Provide technical expertise to audit and assessment teams across AI, machine learning, information security and cloud environments.
2. Review AI system architectures, machine learning lifecycles, data flows, model development processes and supporting technologies.
3. Review security architectures, identity and access management, network security, application security, cloud security and operational controls.
4. Support assessment of AI data quality, bias, fairness, model validation, monitoring, impact assessment and risk treatment.
5. Review implementation of information security controls, including relevant ISO/IEC 27001 Annex A controls.
6. Assess technical evidence and explain whether it appropriately demonstrates implementation of applicable requirements.
7. Review software development, DevSecOps and MLOps processes.
8. Review vulnerability management, logging, monitoring and security operations practices.
9. Support assessment teams in understanding complex technical systems and identifying areas requiring further evidence or investigation.
10. Prepare clear technical notes and supporting documentation for audit and assessment records.
11. Participate in remote or onsite audit and assessment activities as required.
12. Maintain current technical knowledge, continuing professional development records, confidentiality and impartiality requirements.

Required Skills and Experience

1. Significant practical professional experience across Artificial Intelligence, machine learning, information technology and information security.
2. Hands-on experience with AI or machine learning system development, deployment, validation or operation.
3. Experience with machine learning lifecycle processes, including model development, testing, deployment, monitoring and change management.
4. Strong understanding of data quality, bias, fairness, explainability and AI risk management.
5. Experience with software development, MLOps, DevOps or DevSecOps practices.
6. Strong information security experience covering security architecture, identity and access management, cloud security, network security or application security.
7. Experience reviewing security control implementation in Microsoft Azure, AWS, SaaS or comparable environments.
8. Knowledge of vulnerability management, logging, monitoring and security operations.
9. Ability to review technical evidence objectively and relate implementation evidence to defined requirements.
10. Ability to explain complex AI and cybersecurity concepts clearly to auditors, assessors and non-specialist audiences.
11. Strong written communication skills suitable for formal assessment and audit records.

Standards and Framework Knowledge

Candidates should have practical knowledge of relevant standards and frameworks including:

1. ISO/IEC 42001 – Artificial Intelligence Management Systems.
2. ISO/IEC 22989 – Artificial Intelligence Concepts and Terminology.
3. ISO/IEC 5338 – AI System Lifecycle Processes.
4. ISO/IEC 23894 – Artificial Intelligence Risk Management.
5. ISO/IEC 42005 – AI System Impact Assessment.
6. ISO/IEC 27001:2022 – Information Security Management Systems.
7. ISO/IEC 27002:2022 – Information Security Controls.

Qualifications

1. Professional education or training equivalent to university level in computer science, data science, Artificial Intelligence, engineering, cybersecurity, information systems or a related discipline, or equivalent professional experience.
2. Relevant current professional or technical certifications in Artificial Intelligence, cloud technologies or information security.
3. Applicants must be able to provide certification status and expiry or renewal dates, where applicable.
4. Relevant certifications may include CISSP, CCSP, Microsoft, AWS or Google Cloud certifications, AI or machine learning certifications, ISO/IEC 27001 Lead Auditor or Lead Implementer, or ISO/IEC 42001 Lead Auditor or Lead Implementer.

Preferred Experience

1. Experience supporting certification audits, independent assessments or technical assurance reviews.
2. Generative AI and large language model systems.
3. Natural language processing, computer vision or other advanced machine learning technologies.
4. AI governance and responsible AI.
5. Penetration testing, security engineering or security operations.
6. Operational technology or industrial control system security.
7. Research or publication experience in Artificial Intelligence or cybersecurity.
8. Regulatory, ethics or technical review experience.
9. Experience in regulated or critical sectors such as healthcare, financial services, government, utilities or critical infrastructure.

Location and Work Arrangement

1. Remote within Canada.
2. Some assignments may require occasional onsite work or travel within Canada.
3. Applicants must be based in Canada and legally entitled to work in Canada.
4. A criminal record check may be required before access to sensitive systems, information or environments.