Job Requirements

• Partner with the ESA on the AI Security framework and AI standards/policies; map to relevant regulations & standards, and customer commitments.
• Collaborate with Security Engineering, Cyber Assurance, IAM and Compliance teams to share knowledge, support on incidents response, security controls implementation, identity and access management and consult on driving data protection governance.
• Establish measurable control objectives, exceptions, and risk acceptance procedures.
• Implement continuous control validation and control-as-code.
• Collaborate with detection and response teams to define containment playbooks for compromised agents, exposed credentials, unsafe outputs, abnormal data movement, prompt injection attempts, and policy violations.

What your background should look like

• 10+ years in IT and cybersecurity with deep experience across multiple fields like security, architecture and regional compliance
• Proven track record within enterprise security architecture and regulatory compliance programs
• Hands-on technical expertise with modern cloud services (security / platform / IAM / Organizational control policies)
• Hands-on experience with cloud hosted AI and ML building block services (AWS Bedrock, Bedrock Guardrails, Azure Foundry / Cognitive Services, SageMaker AI, S3, etc.)
• Hands-on understanding of AI gateway and model access controls, including LiteLLM, Azure API Management, routing, throttling, failover, policy enforcement, traceability, rate limiting, and provider access governance.
• Expertise in IAM concepts, especially in the services built in AWS and Azure
• Experience translating TEIS AI policies, SRM expectations, ISO 27001, ISO 42001, NIST AI RMF, and AI security requirements into practical controls for application, API, platform, and data teams.
• Strong grasp of ISO 27001, NIST CSF/800-53, and major regulatory regimes
• Ability to translate technical risk into business impact
• Presentation skills (technical & executive)
• Organized, articulate, detailed orientated
• Ability to multi-task, prioritize, work independently, and strong time management skills
• Ability to define clear ownership boundaries across AITC, TEIS, GISS, SRM, IAM, infrastructure, application, API, data, and privacy teams for onboarding, operations, security reviews, and production readiness.