We are seeking an experienced AI Security Risk Manager to provide risk oversight and challenge over the organisation's adoption of AI, Generative AI and emerging technologies.
The role will focus on identifying and managing cybersecurity, technology and data risks associated with AI solutions, while partnering with Technology, Cybersecurity, Data and business teams to enable secure and responsible AI adoption.
Key Responsibilities:
- Provide risk oversight and challenge across AI, Machine Learning and Generative AI initiatives.
- Conduct security risk assessments across the AI lifecycle, from design and development through deployment and ongoing operation.
- Assess AI-specific threats including prompt injection, data leakage, model manipulation, insecure integrations and excessive agency.
- Review security controls across AI applications, models, APIs, data pipelines and supporting cloud infrastructure.
- Assess data protection, access management, encryption, DLP and identity controls supporting AI environments.
- Review security testing approaches including vulnerability assessments, adversarial testing and AI red-teaming.
- Assess risks associated with third-party AI platforms, models and service providers.
- Develop and enhance AI security risk frameworks, policies, standards and minimum control requirements.
- Conduct thematic reviews and monitor control gaps, risk acceptances and remediation activities.
- Provide risk advice on emerging technologies including LLMs, AI agents and AI-enabled applications.
- Monitor evolving AI threats, regulations and industry standards and assess their implications for the organisation.
- Present material AI security risks and recommendations to senior stakeholders and governance committees.
Requirements:
- More than 8 years of experience across cybersecurity, technology risk, information security, security architecture or technology assurance.
- Strong understanding of cybersecurity, technology risk and control frameworks.
- Good understanding of AI/ML, Generative AI and LLM technologies and their associated security risks.
- Knowledge of application security, cloud security, APIs, IAM, data protection, vulnerability management and DevSecOps.
- Experience conducting technology/security risk assessments and assessing control effectiveness.
- Familiarity with frameworks such as NIST AI RMF, ISO 27001, ISO 42001, MITRE ATLAS and OWASP AI/LLM guidance would be advantageous.
- Strong stakeholder management skills with the ability to translate technical risks into clear business impact.
- Relevant certifications such as CISSP, CISM, CRISC or CCSP would be advantageous.
To apply:
If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [Confidential Information] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.
Reg: R1876389
Lic: 16S8060
