AI Security Lead

We are seeking an experienced and hands-on AI Security Professional to establish and strengthen the organisation's AI security posture. The ideal candidate will possess deep expertise in securing Artificial Intelligence (AI), Generative AI (GenAI), Large Language Models (LLMs), AI applications, and Machine Learning (ML) systems throughout their lifecycle.
This role will be responsible for developing AI security governance frameworks, conducting AI threat assessments, implementing technical controls, securing AI development pipelines, and ensuring compliance with regulatory and privacy requirements. The candidate should have practical experience in identifying and mitigating AI-specific threats such as prompt injection, model poisoning, adversarial attacks, data leakage, insecure plugins, model theft, and supply chain risks.
The candidate will have responsibilities across the following functions:
AI Security Strategy and Governance:
Develop and implement the organisation's AI Security Strategy and Roadmap.
Establish AI Security Policies, Standards, and Procedures.
Define secure AI adoption frameworks aligned with: NIST AI Risk Management Framework (AI RMF), OWASP Top 10 for LLM Applications, OWASP Machine Learning Security Top 10 ISO/IEC 42001 ISO/IEC 23894 NIST Cybersecurity Framework, RBI and other regulatory requirements (preferred).
Secure AI/ML Development Lifecycle:
Implement Secure AI Development Lifecycle (SAI-SDLC).
Integrate security controls into AI/ML pipelines and MLOps processes.
Conduct security reviews of: LLM applications, RAG architectures, AI Agents, Model APIs, AI plugins and extensions.
Review AI architectures from a security and privacy perspective.
AI Security Assessments and Testing:
Perform hands-on assessments including:
AI Threat Modelling
LLM Security Assessments
AI Red Teaming Exercises
Prompt Injection Testing
Jailbreak Testing
Model Extraction Testing
Model Poisoning Assessments
Adversarial ML Testing
AI API Security Reviews
AI Supply Chain Security Assessments
AI Infrastructure Security Reviews
Security assessments of AI agents and autonomous systems.
Security Controls Implementation:
Design and implement controls including:
AI Guardrails
Prompt Filtering
Input/Output Validation
Data Loss Prevention (DLP)
AI Gateway Security
Model Access Controls
Secrets Management
Data Classification and Privacy Controls
AI Monitoring and Logging
Model Integrity Controls
Human-in-the-Loop controls
Secure RAG implementation practices.
AI Security Operations:
Monitor AI systems for security threats and abuse.
Develop AI-specific detection and response use cases.
Build monitoring for: Prompt abuse, Data exfiltration, Model misuse, Unauthorised model access, Hallucination and manipulation attempts.
Conduct incident investigations involving AI systems.
AI Risk and Compliance:
Conduct AI risk assessments and privacy impact assessments.
Establish AI governance processes.
Define AI security review and approval mechanisms.
Ensure compliance with privacy regulations and industry standards.
Support audits and regulatory examinations.
Third-Party AI Risk Management:
Assess security of AI vendors and SaaS AI platforms.
Evaluate: ChatGPT Enterprise, Claude, Microsoft Copilot, Google Gemini, AI coding assistants, AI APIs and models.
Conduct AI vendor due diligence and contract reviews.
AI and GenAI Security:
Strong understanding of:
Large Language Models (LLMs)
Generative AI
Retrieval-Augmented Generation (RAG)
AI Agents
Prompt Engineering
AI Model Lifecycle
Agentic AI Security
Hands-On Security Experience In:
Prompt Injection Attacks
Adversarial Machine Learning
AI Red Teaming
LLM Vulnerability Assessments
Secure AI Architecture Reviews
AI Application Penetration Testing
Model Security Assessments
AI Supply Chain Security
Data Privacy in AI Systems
AI Security Monitoring
Technical Experience With:
Python
LangChain
LangGraph
LlamaIndex
OpenAI APIs
Anthropic APIs
Hugging Face
Docker
Kubernetes
GitHub/GitLab
Cloud Platforms (AWS/Azure/GCP)
SIEM tools
Security testing tools.
Preferred Security Tools Experience:
NVIDIA NeMo Guardrails
Lakera AI
Protect AI
HiddenLayer
Microsoft AI Security tools
Palo Alto AI Security
Promptfoo
Garak
PyRIT
OWASP GenAI Security tools.

Experience
4-8 yrs