Information Security Analyst, AI Governance

Form Energy · Operations

Pay: $111,826 – $139,777
Where: Somerville, MA
Posted: Aug 26

Are you ready to build America’s energy future? Form Energy is an American manufacturing and energy technology company. We’re revolutionizing energy storage with cost-effective, multi-day technology designed to keep the electric grid secure and reliable, even during extended periods of stress. By strengthening the electric system and reimagining what’s possible, we’re giving clean energy a whole new form!

In recent years, Form Energy has earned a number of accolades, including being named by TIME as a “Best Invention”, MIT Technology Review as a “Top Climate Tech Company To Watch”, and Fast Company as “One of the Next Big Things In Tech”. We are making rapid progress on our mission of delivering energy storage for a better world, and our team is growing just as rapidly to meet demand.

What you'd do

Own the intake and review process for new AI applications, skills, plugins, and agents — assessing business value, data access, permission scope, and vendor security posture before approval.
Lead security review of AI tools, including evaluating data handling and retention practices, model/vendor trust boundaries, prompt-injection and jailbreak exposure, third-party plugin risk, and integration permissions (OAuth scopes, API access, connected data sources).
Manage deployment and configuration of approved AI applications across the organization, including access provisioning, environment/tenant setup, and rollout communication and training.
Establish and maintain an inventory and risk register of all AI applications, skills, plugins, and agents in use, tracking ownership, data scope, and review status — including inactive or abandoned deployments.
Define and enforce guardrails for agentic tools specifically — reviewing what actions an agent is authorized to take autonomously (e.g., sending communications, modifying records, executing code) and setting approval thresholds, logging, and rollback procedures.
Monitor usage, cost, and performance of deployed AI tools, and manage the ongoing vendor relationship including contract renewals, model/version updates, and deprecation planning.
Partner with IT security, legal, and business stakeholders to develop and maintain AI usage policy, acceptable-use guidelines, and an approval workflow that scales with demand without becoming a bottleneck.
Investigate and respond to AI-related incidents (e.g., data leakage through a connected tool, unexpected agent behavior, plugin compromise), coordinating remediation and post-incident review.
Build lightweight documentation, training, and office-hours support to help employees use approved AI tools effectively and safely, and to route new requests through the review pipeline.
Stay current on the fast-changing AI application, plugin, and agent landscape, and proactively flag emerging capabilities or risks relevant to Form Energy.