AI Cybersecurity Governance Specialist

Deep Light AI is a specialist AI and data consultancy with extensive experience implementing intelligent enterprise systems across multiple industries, with particular depth in financial services and banking. Our team combines deep expertise in data science, statistical modelling, AI/ML technologies, workflow automation, and systems integration with a practical understanding of complex business operations.

Deep Light AI is a specialist AI and data consultancy dedicated to transforming the regional corporate landscape through bespoke, high-impact intelligent systems. Based in the UAE, we partner with organizations across diverse sectors—with a deep-rooted expertise in Financial Services and Banking—to bridge the gap between complex data and actionable business strategy.

At Deep Light, we don't believe in "off-the-shelf" fixes. We deliver tailored AI solutions designed to integrate seamlessly into existing enterprise architectures, ensuring that innovation is both scalable and secure. From building robust data foundations to deploying sophisticated AI platforms, we empower our clients to lead in an increasingly automated world.

The AI Cybersecurity Governance Specialist is a senior policy and risk management position within Deeplight consultancy, embedded directly within a major banking client. The role is responsible for designing, defining, and embedding enterprise-wide governance frameworks specifically built to manage cybersecurity risks associated with Artificial Intelligence and Machine Learning systems. Serving as a foundational link between corporate risk policy, regulatory mandates, and technical execution, this position ensures that the bank's AI deployments are secure, compliant, and ethically governed, while maintaining Deeplight's benchmark for professional excellence.

Your responsibilities in this role include:

• Framework Definition:
  Establish, update, and maintain the bank's AI cybersecurity governance frameworks, policies, and operational guardrails
• Risk Lifecycle Management:
  Define the processes for identifying, assessing, and registering cybersecurity risks unique to AI models, training data pipelines, and third-party AI integrations
• Regulatory Compliance:
  Monitor and interpret emerging regional and global AI and financial regulations (e.g., EU AI Act, local central bank guidelines) to ensure internal security policies remain fully aligned
• Cross-Functional Alignment:
  Collaborate with AI developers, MLOps engineers, legal counsel, and data privacy officers to ensure governance requirements are integrated without unnecessarily hindering innovation
• Executive & Committee Reporting:
  Design and present comprehensive AI risk posture dashboards, policy exceptions, and compliance metrics to the bank's risk committees and senior executive leadership
• Strategic Delivery:
  Act as a champion for secure AI adoption across the institution, modelling high professional standards and institutional accountability across all client engagements

As an AI consultancy, our greatest asset is the expertise of our people.

While technical mastery is the foundation of what we do, the ability to bridge the gap between complex data science and actionable business value is what defines your success with Deeplight.

We're looking for individuals who are not only world-class in their fields of specialism, but also compelling communicators and persuasive advocates for their own skills.

You will be the face of our firm, tasked with building trust, articulating the "why" behind your technical decisions, and effectively "selling" your vision to high-level stakeholders.

If you thrive on the challenge of presenting cutting-edge solutions as much as you do on building them, you will fit right in.

• AI Risk Governance:
  Expert knowledge of AI-specific risk landscapes, including model vulnerabilities (e.g., data poisoning, prompt injection, model extraction) and ethical AI governance concepts
• Cybersecurity Frameworks:
  Deep proficiency in traditional and emerging cybersecurity and governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, COBIT)
• Regulatory Interpretation:
  Ability to translate complex regulatory documents and compliance obligations into practical, enforceable corporate policies
• Executive Communication:
  Exceptional verbal and written communication skills, with a proven ability to defend policy decisions to senior bank executives and regulatory auditors
• Strategic Diplomacy:
  Capacity to manage conflicting priorities between technical data science teams focused on velocity and risk teams focused on control
• Professional Tenure:
  Minimum of 6 years in cybersecurity governance, risk management, or compliance (GRC), with at least 2 years explicitly focused on emerging technologies, advanced data architectures, or AI/ML systems
• Financial Services Context:
  Documented experience designing policy or governance structures within a regulated tier-1 or tier-2 financial institution or highly regulated corporate environment
• Consulting…