AI Security Governance & Policy Specialist

About the role

We are seeking an AI Security Governance & Policy Specialist to design, implement, and operate security governance for LLM/ML/AI solutions throughout their full lifecycle at a leading Islamic bank in Kuwait. The role focuses on translating standards into actionable controls, conducting risk assessments, and ensuring rigorous testing and monitoring of AI systems.

Key responsibilities

• Draft, maintain and publish AI security policies, standards and baseline controls for model onboarding, AI SDLC, data governance and logging.
• Create reusable governance artifacts such as intake forms, control checklists, evidence packs and waiver templates.
• Perform hands‑on AI security risk assessments, document threat scenarios, required and compensating controls, and maintain a risk register with remediation actions.
• Validate control implementation by reviewing technical evidence (architecture diagrams, IAM roles, secrets handling, logging configuration, test results and monitoring dashboards).
• Define and enforce minimum assurance requirements, including adversarial testing/red‑team exercises, secure code reviews for AI application layers and vulnerability management.
• Collaborate with the VMPT team to ensure AI solutions undergo appropriate testing and evidence‑based exception handling.

Required profile

• Extensive experience in security governance, risk management and policy development for AI/ML systems.
• Strong knowledge of NIST AI RMF, ISO/IEC 42001, ISO/IEC 27001 and related security frameworks.
• Proven ability to translate high‑level frameworks into practical, testable control requirements.
• Experience working in regulated financial services environments.

Required skills

• AI security risk assessment
• Adversarial testing / red teaming
• Secure code review for AI applications
• Identity and Access Management (IAM) design
• Logging and telemetry configuration
• Threat modeling and secure AI SDLC
• Data governance for AI (classification, minimization, leakage prevention)