Security Solutions Advisor – AI & Emerging Technology

Please note: This posting provides a summary of the position and its primary responsibilities. A complete job description, including additional responsibilities and position requirements, is available upon request.

Position Summary: Pinnacle IT is seeking an experienced cybersecurity professional to serve as our Cybersecurity Solutions Advisor – AI & Emerging Technology. This position combines hands-on cybersecurity engineering, client consulting, and practical experience with artificial intelligence to help organizations securely adopt AI and other emerging technologies. This is a cybersecurity-first role. We are not looking for an AI developer, data scientist, or machine learning engineer. We are looking for a cybersecurity professional with strong technical security expertise, at least one year of practical experience working with AI technologies, and the ability to apply established security principles to new and rapidly evolving technologies. This individual will work directly with clients to understand what they want to accomplish with AI, evaluate the associated cybersecurity, privacy, compliance, and operational risks, and determine what must be addressed before implementation. They will then develop the path forward andpersonally perform the technical security and compliance work necessary to prepare the client's environment for secure adoption. The successful candidate must be equally comfortable discussing cybersecurity risk with executive leadership and working hands-on within Microsoft 365 and related technologies to implement security controls. This position resides within Pinnacle IT's Cybersecurity Team and serves as a subject matter expert for the security of AI and emerging technologies.

Client Advisory & Security Assessments: Lead client conversations regarding proposed AI initiatives, business objectives, use cases, and technology requirements. Conduct AI Readiness and Security Assessments to determine whether client environments are appropriately secured and governed for AI adoption. Evaluate identity and access management, permissions, privileged access, data exposure, information governance, endpoint security, authentication, application access, monitoring, and other relevant controls. Identify cybersecurity, privacy, compliance, data-governance, and operational risks associated with proposed AI use cases. Identify existing security weaknesses that may create or amplify risk when AI is introduced. Evaluate risks associated with AI applications, agents, connectors, integrations, APIs, third-party services, and organizational data access. Identify risks associated with unauthorized or "shadow AI" usage. Translate technical findings into clear, practical recommendations for executive and non-technical audiences. Develop prioritized remediation plans and secure paths forward for AI adoption.

Hands-On Security Engineering & Remediation: This is a hands-on technical position. The Cybersecurity Solutions Advisor is expected to personally implement the security changes and remediations identified during assessments. Secure and administer Microsoft 365 environments. Configure and manage Microsoft Entra ID, Conditional Access, Microsoft Defender, Microsoft Purview, Data Loss Prevention (DLP), Sensitivity Labels, Information Protection, identity protections, auditing, retention, and related Microsoft security technologies. Review and remediate Microsoft 365 permissions, access controls, sharing configurations, and information-governance settings. Implement security and governance controls for Microsoft 365 Copilot, Copilot Studio, agents, connectors, and other AI-enabled services. Implement identity, access, data protection, application governance, monitoring, and compliance controls. Recommend Microsoft licensing changes, security add-ons, or additional technologies necessary to meet security requirements. Test and validate implemented configurations and remediate identified security weaknesses.

End-to-End Client & Project Ownership: Own assigned engagements from the initial client conversation through assessment, remediation, implementation, validation, documentation, and final handoff. Serve as the primary technical and security point of contact for assigned engagements. Proactively drive projects forward, manage dependencies, follow up on outstanding items, and prevent engagements from stalling. Personally perform technical security work within the position's areas of expertise. Coordinate with Pinnacle IT's Cloud, Network, Server, Field Services, Help Desk, Sales, Account Management, and other teams when specialized expertise is required. Maintain accountability for the overall engagement even when assistance from other internal teams is necessary. Ensure required remediations are completed, tested, documented, and validated before an engagement is considered complete.

AI Security, Governance & Emerging Technology: Help clients establish practical governance around organizational AI usage. Develop or recommend AI acceptable-use policies, standards, approval processes, and security requirements. Assist clients in defining approved and prohibited AI use cases. Evaluate enterprise versus consumer AI solutions from a cybersecurity and data-protection perspective. Assess how AI providers collect, retain, process, share, and potentially use organizational data. Evaluate security risks involving AI agents, automated actions, integrations, and access to organizational systems and information. Apply applicable cybersecurity, privacy, and compliance frameworks, including NIST CSF, NIST AI RMF, HIPAA, CMMC, CJIS, and others as appropriate. Stay current on AI technologies, enterprise AI platforms, cybersecurity threats, Microsoft security capabilities, and regulatory developments. Help Pinnacle IT continue developing repeatable AI security and emerging-technology services, standards, and methodologies.

Required Qualifications: 5+ years of professional experience in cybersecurity, information security, security engineering, or a closely related technical security role. Strong hands-on experience securing and administering Microsoft 365 environments. Experience with Microsoft Entra ID, Conditional Access, Microsoft Defender, Microsoft Purview, identity and access management, information protection, and Microsoft 365 security controls. Demonstrated ability to independently implement cybersecurity controls and remediate security weaknesses. Strong understanding of identity security, access control, data protection, information governance, endpoint security, authentication, and cybersecurity fundamentals. Minimum of one year of practical experience using, evaluating, administering, securing, or implementing artificial intelligence technologies in a professional or business environment. Working knowledge of generative AI platforms and their associated cybersecurity, privacy, governance, and data-protection risks. Ability to assess business technology use cases and identify cybersecurity, privacy, compliance, and operational implications. Strong client-facing communication, consulting, and presentation skills. Ability to communicate effectively with executive leadership, technical personnel, and end users. Ability to independently manage technical projects and client engagements from discovery through completion. Strong troubleshooting, analytical, research, problem-solving, and technical documentation skills.

Preferred Qualifications: Experience with Microsoft 365 Copilot, Microsoft Copilot Studio, ChatGPT Enterprise, Azure AI Services, or other enterprise AI technologies. Experience conducting cybersecurity risk or security-readiness assessments. Experience with Microsoft data governance, information protection, DLP, sensitivity labeling, and data classification. Experience assessing or securing AI applications, agents, integrations, connectors, or enterprise AI deployments. Experience with NIST CSF, NIST AI RMF, HIPAA, CMMC, CJIS, or other cybersecurity and compliance frameworks. Experience working within an MSP, MSSP, consulting organization, or other multi-client technical environment. Experience supporting technical sales, solution design, project scoping, or client technology strategy. Relevant cybersecurity, Microsoft, privacy, compliance, governance, or AI security certifications.

What Success Looks Like: The successful candidate approaches AI and emerging technologyas a cybersecurity professional first. They understand the client's business objective, identify how existing security weaknesses may create additional risk, and provide a practical path toward secure adoption. Most importantly, this individual has thetechnical expertise to personally implement the security changes they recommendand takes ownership of client engagements from the initial conversation through successful technical completion. This role is ideal for an experienced cybersecurity professional who has embraced AI, understands its opportunities and risks, enjoys working directly with clients, and wants to help organizations adopt emerging technologies without unnecessarily exposing their systems or data to additional risk.