Lead AI GRC- Cybersecurity- CFU

Job description

Lead Software Engineer

• GenAI for Cybersecurity Red Team. AI security risk advisory, cybersecurity governance, and responsible AI oversight for enterprise adoption.

Full-Time Experience

• - 8+ years in cybersecurity, risk, governance, security advisory, or Information officer-related roles & AI Primary Focus:
• Business security advisory, AI use-case risk assessment, responsible AI governance, stakeholder management. Lead AI GRC Cybersecurity – AI acts as the primary cybersecurity partner for business stakeholders adopting Artificial Intelligence.

The role ensures that AI use cases, AI agents are assessed, challenged, and governed in line with internal security standards, regulatory expectations, risk appetite, and responsible AI principles. This is a senior governance and advisory role, distinct from hands-on AI engineering. The successful candidate will bridge business, technology, cybersecurity, compliance, risk, and leadership teams to support secure and business-aligned AI adoption.

Key Responsibilities

Security Advisory & Risk Management

• Identify, assess, and challenge cybersecurity risks associated with AI use cases, AI agents, and AI-enabled services.
• Provide risk-based security guidance throughout the project lifecycle from ideation to production deployment.
• Support security risk assessments, remediation planning, and acceptance decisions.

AI Governance & Responsible AI

• Review AI initiatives for alignment with internal security standards, governance frameworks, and responsible AI principles.
• Assess risks related to data protection, model security, privacy, third-party AI providers, AI agents, and business process impact.
• Ensure AI-related initiatives comply with applicable regulatory obligations, enterprise security policies, and risk management expectations.
• Provide independent challenge where AI use cases create elevated security, privacy, operational, or misuse risks. Oversight, Reporting & Challenge
• Monitor AI-related security risks, remediation actions, control gaps, and residual risk positions.
• Report security posture, key risks, and mitigation progress to leadership and relevant governance bodies.
• Support audits, regulatory reviews, risk committees, and internal assessments where required.
• Track adherence to security requirements and challenge exceptions or deviations from expected controls.