{"id":552363,"url":"https://alion.io/job/gibson-dunn-director-ai-security","title":"Director, AI Security","company":{"id":185365,"name":"Gibson Dunn","domain":"gibsondunn.com","url":"https://alion.io/company/gibson-dunn","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":26,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":300000,"max":380000,"currency":"USD","period":"year","gross":null,"usd_annual":380000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"EU AI Act","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"RAG","optional":false},{"name":"Red Teaming","optional":false}],"status":"closed","first_seen_at":"2026-09-08T16:00:00Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-29T17:22:52Z","board_verified":false,"closed_at":"2026-10-29T17:22:52Z","days_open":51,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":51},"description":"Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high-stakes. The firm’s work is distinguished by a unique combination of precision and vision.\nBased in New York, the Director of AI Security will work directly with the CISO to define the firm’s AI security strategy and determine and build the function required to deliver it - its shape, its size, its sequencing and its budget. This is the firm's first dedicated AI security role, with no inherited team or playbook; defining the team required to deliver the strategy is a key part of the role. The position requires the ability to engage credibly with senior executives and practice group leadership on strategy, while also reasoning about technical details such as token scopes and prompt injection.\nThis role reports to the Chief Information Security Officer.\nResponsibilities include:\nAI Security Strategy & Program Development\nDefine the firm's AI security strategy, target architecture, and multi-year roadmap in partnership with the CISO, and secure executive endorsement.\nDesign, budget, recruit, and lead the AI security function, including team structure, tooling, and build-versus-buy decisions.\nEstablish the security control framework for AI systems.\nOwn the security review stage of the AI use-case intake and approval process, ensuring a clear and timely path from proposal to production.\nPartner with the Office of General Counsel and the Cyber & Data Governance Committee on obligations relating to confidentiality, privilege, and competent use of technology.\n Stakeholder Engagement & Secure AI Enablement\nBuild relationships with partners, practice group leaders, and business leaders to understand the drivers of AI adoption and translate business needs into secure delivery options.\nPresent AI risk and strategy to executive stakeholders and, where required, to clients.\nConduct security architecture and design reviews for AI platforms, RAG pipelines, agent frameworks, and in-house builds.\nDefine controls against AI-specific threats, including prompt injection, tool abuse, data leakage, supply chain compromise, and cross-matter contamination.\nAddress unsanctioned AI use through discovery, sanctioned alternatives, and clear guidance, in partnership with IT and the practice groups.\n Identity & Access Management for AI Systems\nOwn the firm's agentic identity model, governing how agents, service accounts, and tool integrations are issued identity, authenticated, scoped, and revoked.\nEstablish lifecycle governance for non-human identities, including registration, ownership, entitlement review, credential rotation, and decommissioning.\nDefine authorization patterns for delegated access, ensuring agents never exceed user entitlements and that ethical walls and matter-level restrictions hold.\nSet governance standards for tools and connectors, including MCP servers and equivalent integration layers.\nEnsure every consequential agent action is auditable and attributable to an identity, delegating principal, and matter context.\n AI-Enabled Security Operations\nDevelop and own the roadmap for applying AI within the security function.\nIdentify and deliver high-value use cases such as alert triage, detection engineering, investigation support, and third-party risk review.\nSet operating standards for the security function's own AI systems, including autonomy limits, human review points, and ongoing evaluation.\nMaintain a current view of AI-enabled threats to the firm and ensure defenses and awareness training keep pace.\nMeasure and report operational impact of AI investments.\n Assurance, Risk & Compliance\nEstablish AI red teaming and adversarial testing programs, with findings tracked to remediation.\nDefine pre-deployment and change-driven security evaluation criteria for AI systems, including guardrail regression testing.\nOwn AI-specific incident response playbooks and support the IR team on AI-related events.\nLead security assessments of AI vendors and legal-tech platforms.\nTranslate emerging regulation and guidance (e.g., EU AI Act, bar association guidance) into control requirements.\nDeputize for the CISO on AI matters at management and committee level.\n Qualifications:\nStrong strategic and analytical thinking, with a track record of building a security capability from the ground up rather than inheriting one.\nAbility to operate at executive level - setting strategy, making the business case for investment, and holding your position with senior stakeholders under pressure to move quickly.\nAbility to influence without formal authority and earn trust in a partnership environment, including from fee earners.\nExcellent written and verbal communication, including with clients and regulators.\nExperience:\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent experience).\n10+ years of information security experience, including end-to-end ownership of a significant security domain.\nDeep, practical experience securing production AI and LLM systems, including AI-specific threats such as prompt injection and data leakage.\nStrong identity and access management foundations (OAuth 2.0, OIDC, SAML, delegation patterns, machine identity at scale).\nSecurity architecture experience across cloud (Azure and/or AWS) and SaaS-heavy environments.\nExperience applying AI or automation to measurably improve security operations.\nRelevant certifications (CISSP, CCSP, CISM, or equivalents) a plus.\nGibson Dunn will consider for employment qualified Applicants with Criminal Histories in a manner consistent with the requirements of local law.\nCompensation & Benefits:\nThe annual compensation range for this position is $300,000 - $380,000. The salary offered within this range will depend upon qualifications and other operational considerations.\nBenefits offered for this position include health care; retirement benefits; paid days off, including sick time, and vacation time; parental leave; basic life insurance; Flexible Spending Accounts; as well as discretionary, performance-based bonuses.\n______\nFor technical difficulties with our online application, please contact us at . Our recruiting support team will respond as soon as possible.\n______\nGibson Dunn is committed to ensuring equal employment opportunities for all qualified applicants, including individuals with disabilities. We strive to ensure an inclusive and accessible hiring experience. The Firm will provide reasonable accommodations to qualified individuals with disabilities to enable participation in the application and recruitment process, unless doing so would impose an undue hardship, in accordance with applicable laws and regulations.\nIf you require a reasonable accommodation to complete an application, participate in an interview, or otherwise take part in the recruitment process, please contact us at . Please note, this is a dedicated email inbox established exclusively to assist applicants with accommodation request related to the recruitment process. Inquiries about the status of an application or other non-accommodation matter will not receive a response.","description_format":"text","description_chars":7363,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Legal Services"],"lifecycle":[{"event":"open","at":"2026-09-08T17:07:41Z"},{"event":"close","at":"2026-10-29T17:22:52Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":380000,"is_top_pay":true},"html_url":"https://alion.io/job/gibson-dunn-director-ai-security","json_url":"https://alion.io/job/gibson-dunn-director-ai-security.json","meta":{"generated_at":"2026-10-30T02:00:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2644,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":185365},"rest":"https://alion.io/mcp/rest/get_company?id=185365"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgibson-dunn-director-ai-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgibson-dunn-director-ai-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgibson-dunn-director-ai-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gibson-dunn-director-ai-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgibson-dunn-director-ai-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":552363}},{"tool":"search_jobs","arguments":{"company":"gibsondunn.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":552363},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}