AI Security Governance & Policy Specialist

About the role

A well-known Islamic bank in Kuwait is hiring an AI Security Governance & Policy Specialist to build and run security governance for LLM/ML/AI systems across the full lifecycle, from use-case intake to design, build, test, deploy, monitor and retire. The role produces enforceable policies and standards, translates frameworks into practical controls, runs AI security risk assessments and reviews designs and evidence, working with the vendor partner VMPT.

Key responsibilities

• Draft, maintain and publish AI security policies, standards and minimum baselines, including model onboarding, secure AI SDLC, data governance, logging and telemetry requirements, and reusable templates such as intake forms, checklists and exception forms.
• Perform hands-on AI security risk assessments and maintain a risk register with remediation actions, owners and closure evidence.
• Validate control implementation by reviewing technical evidence and test results, and define assurance requirements including adversarial testing, secure code review and pre- and post-release monitoring.
• Keep guidance aligned with OWASP LLM Top 10 and turn it into developer-friendly mitigation checklists.
• Maintain secure-by-default patterns for Azure-based GenAI deployments (IAM, network isolation, secrets management, logging baselines) and define enterprise GenAI data handling rules.
• Support onboarding of third-party AI services by defining security questionnaires, minimum security clauses and acceptable risk thresholds.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Risk/Compliance or a related discipline.
• 5-10 years of experience in cybersecurity governance, risk management, compliance, security assurance or security architecture.
• Ability to translate frameworks into practical, evidence-backed controls and standards.
• Practical understanding of LLM/AI patterns (RAG, agents, embeddings, fine-tuning, model APIs) and their security implications.

Required skills

• Working knowledge of NIST AI RMF and ISO/IEC 42001, and familiarity with ISO/IEC 27001-style controls.
• Highly recommended: CISSP, AIGP, ISO/IEC 27001 Lead Implementer; preferred: CCSP, Microsoft Cybersecurity Architect Expert (SC-100), Azure AI Engineer Associate (AI-102).