AI Security Governance Architect

This is a fully remote position, open to applicants in Spain.

📋 Description

• Establish and enhance AI security governance frameworks that encompass AI use case registration, risk classification, security controls, approvals, exceptions, monitoring, and periodic reassessment.

• Ensure AI security governance is aligned with NIST AI RMF, NIST Generative AI Profile, ISO/IEC 42001, OWASP Top 10 for LLM Applications, and the EU AI Act.

• Evaluate AI, GenAI, and agentic AI use cases from a cybersecurity viewpoint.

• Analyze risks such as prompt injection, sensitive data leakage, identity and access management, excessive agent permissions, model exposure, third-party AI services, data residency, and AI supply chain risks.

• Convert AI risks into security policies, technical requirements, architecture patterns, guardrails, evidence requirements, ownership, and acceptance criteria.

• Outline security requirements and architecture patterns for internal copilots, Microsoft 365 Copilot, custom GenAI applications, RAG systems, AI agents, ML models, vendor AI solutions, and low-code/no-code AI automations.

• Integrate AI security governance with HiddenLayer, Sentra, Zenity, GRC, IAM, DLP, SIEM/SOC, cloud security, CMDB, and data governance frameworks.

• Develop and enhance AI security governance deliverables, which include control frameworks, use case classification models, security requirements, architecture patterns, risk acceptance processes, security review templates, KPI/KRI dashboards, and maturity roadmaps.

• Simplify complex cybersecurity risks into clear requirements and recommendations for both technical and executive stakeholders.

⛳️ Requirements

• A minimum of 8 years of experience in cybersecurity, with a robust background in security governance, security architecture, risk management, AppSec, or Cloud Security.

• In-depth understanding of AI and GenAI security risks, including LLM application security, prompt injection, sensitive data leakage, RAG security, AI agent permissions, model/API exposure, model supply chain, and third-party AI services.

• Proven experience in designing and implementing security governance and control frameworks.

• Capability to translate policies and risk requirements into actionable controls, processes, and security specifications.

• Familiarity with AI security and governance frameworks, such as NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLM Applications, and associated AI risk and security standards.

• Ability to collaborate effectively across security, architecture, and business teams.

• Exceptional communication and documentation abilities.

• Proficient in both English and Spanish.

• Preferred experience with AI governance programs, GenAI security assessments, or AI Security Posture Management (AISPM).

• Preferred experience securing enterprise AI environments like Microsoft 365 Copilot, custom GenAI applications, RAG solutions, or AI agents.

• Knowledge of cloud security architecture, Secure SDLC/DevSecOps, DSPM, GRC, or AI-related SOC monitoring is preferred.

• Familiarity with platforms such as HiddenLayer, Sentra, Zenity, Wiz, Microsoft Purview, Defender, CSPM/CWPP, DLP, or SIEM/SOAR is preferred.

• Preferred knowledge of third-party AI risk management and security control evidence automation.

• Understanding of privacy and AI regulatory requirements, including GDPR, DPIAs, data classification, and the EU AI Act is preferred.

🏝️ Benefits

• Flexible schedule of 35 hours per week.

• Option for fully remote work.

• Flexible compensation options for restaurant, transport, and childcare expenses.

• Comprehensive health insurance at no cost, with a co-payment for dental services.

• Individual budget allocated for training or equipment, along with free Microsoft certifications.

• English language lessons provided.

• A day off for your birthday.

• Monthly bonuses to cover home electricity and internet expenses.

• Discounts available for gym memberships and sports activities.

• Annual team-building event known as Plain Camp.

• Opportunities to attend events and listen to guest speakers.

• Welcome pack for new employees.

• Baby basket for new parents.

• Christmas basket provided to employees.

• Access to an employee discount portal.

• State-of-the-art technological tools provided.

• Phone screening followed by two interviews with the team.