Large Firms Create Dedicated AI Security Roles as Governance Accountability Remains Unclear
New data shows 65% of large firms have established head of AI security roles, yet clear executive accountability for AI governance remains unsettled across industries.
Key points
- % of organizations with over $10bn in revenue have established a head of AI security role.
- CISOs hold primary accountability for AI governance in only 7% of large organizations.
- Nearly half of firms across all sizes report no single executive is accountable for AI oversight.
Sixty-five percent of large organizations with annual revenues exceeding $10 billion have established a head of AI security role, according to new research from IANS and Artico Search. The report, published on October 20, indicates that these enterprises are restructuring their security teams to improve board-level oversight for enterprise AI governance.
The study found that 18% of these large firms have made head of AI security a dedicated position, while 47% combined it with another leadership role. Researchers described this as one of the fastest emerging functional roles in the industry. Steve Martano, an IANS faculty member and partner at Artico Search, noted that the growth of AI is creating a premium for leaders who can bridge technical security, risk, and compliance with business objectives.
Governance Accountability Gaps
Despite the rise in dedicated roles, the IANS report found that overall accountability for enterprise AI governance remains unsettled. Chief Information Security Officers hold primary accountability in only 7% of large organizations, compared to 11% of medium firms and 26% of small businesses. In large businesses, chief AI officers are the most common holders of this accountability, at 22%.
Across all organization sizes, 14% to 19% of firms reported that no single executive is accountable for AI governance. Additionally, most organizations have not fully implemented a board committee dedicated to AI ethics or responsible AI. Between 43% and 48% of firms across all tiers stated they have no such committee planned, according to the data.
Impact by Company Size
The head of AI security role is significantly less common in smaller enterprises. The position was established in only 9% of organizations with revenues between $1 billion and $10 billion. In firms with under $1 billion in annual revenue, just 6% have created this role. This disparity suggests that governance structures are evolving at different rates depending on organizational scale and resources.
Martano advised that organizations must strategically consider whether to develop expertise internally or hire externally. He noted that companies need to think carefully about what they require from the function before entering an increasingly competitive external market for AI security talent.
What should you do?
Security leaders should review their current organizational charts to identify gaps in AI governance accountability. Evaluate whether existing roles, such as CISO or chief AI officer, have the mandate and resources to oversee AI risks effectively. Consider establishing a dedicated board committee for AI ethics if one does not already exist. Monitor industry trends for emerging best practices in AI security role definition.
What to do and how to stay safe: AI security
- Audit current executive responsibilities to determine if a single person is accountable for AI governance.
- Assess whether your organization has a board committee dedicated to AI ethics or responsible AI.
- Evaluate if internal teams have the expertise to manage AI security risks or if external hiring is needed.
- Review security organizational structures to ensure they align with rapid AI adoption within the business.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What percentage of large firms have a head of AI security role?
According to the IANS and Artico Search report, 65% of large organizations with annual revenue over $10 billion have established this role.
Who holds primary accountability for AI governance in large organizations?
Chief AI officers hold primary accountability in 22% of large businesses, while CISOs hold it in only 7%.
Do most firms have a board committee for AI ethics?
No, between 43% and 48% of organizations across all sizes reported having no such committee planned.
