AI Security Governance & Policy Specialist

About the role

We are seeking an AI Security Governance & Policy Specialist to establish and operate security governance for LLM/ML/AI solutions throughout their full lifecycle. The role will translate recognized frameworks into practical controls, conduct risk assessments, and ensure rigorous testing and monitoring of AI systems.

Key responsibilities

• Draft, maintain, and publish AI security policies, standards, and baseline controls for LLM/ML/AI solutions.
• Create reusable governance artifacts such as intake forms, control checklists, evidence packs, and exception waivers.
• Perform hands‑on AI security risk assessments, document threat scenarios, required and compensating controls, and residual risk.
• Maintain an AI security risk register with remediation actions, owners, and closure evidence.
• Validate control implementation by reviewing technical evidence (architecture diagrams, IAM roles, secrets handling, logging configuration, test results, monitoring dashboards).
• Define and enforce minimum assurance requirements, including adversarial testing/red‑team exercises and secure code review for AI application layers.

Required profile

• Strong understanding of AI security governance frameworks such as NIST AI RMF and ISO/IEC 42001.
• Experience aligning AI controls with enterprise security baselines (e.g., ISO/IEC 27001).
• Proven ability to translate high‑level policies into actionable technical requirements.
• Excellent analytical skills to assess AI‑specific threats and recommend risk treatments.

Required skills

• AI security risk assessment
• Adversarial testing / red teaming
• Secure code review for AI applications
• Threat modeling
• Identity and Access Management (IAM)
• Logging and monitoring of AI systems