AI Security & Governance Lead

Responsibilities

• Ensure every AI initiative meets security, privacy, and Responsible AI standards before reaching production.
• Translate AI governance policies into technical controls, playbooks, and automated checks.
• Implement the enterprise AI Governance Framework across all AI solutions.
• Onboard datasets and applications to Microsoft Purview, defining classifications, sensitivity labels, DLP, and access policies.
• Implement tenant, application, and data security baselines across Entra , PIM, Conditional Access, and Defender.
• Establish AI risk assessment, threat modeling, red‑team, jailbreak testing, and prompt content safety controls.
• Operate auditability, Purview Audit, retention, investigation runbooks, and evidence management for reviews.
• Run DSPM for AI posture management, track risks, drive remediation, and report to governance councils.
• Work with Legal and Compliance on data residency, IP, and regulatory requirements, supporting vendor due diligence.
• Own the AI Governance Stage Gates: pre‑development approval, pre‑production approval, and post‑deployment assurance.
• Act as a governance interface to delivery partners’ solution architects and delivery leads without designing or implementing AI solutions yourself.
• Define and enforce governance requirements for all external vendors covering transparency, data usage boundaries, audit rights, and assurance artefacts.

• 8‑10 years in cloud security and governance with hands‑on experience across the Microsoft security stack and exposure to AI systems.
• Demonstrated experience implementing data protection and audit controls in regulated environments.
• Bachelor’s in Computer Science, Information Security, or equivalent.

• Microsoft Purview catalog, Information Protection, DLP, Audit.
• Entra , PIM, Conditional Access.
• Defender for Cloud and Defender for Cloud Apps.
• Threat modeling for AI and LLM systems, prompt injection and jailbreak testing, safety filters, and content moderation.
• KQL for investigations, eDiscovery fundamentals, evidence management.
• Policy‑as‑code, Azure Policy, automation, Logic Apps, Functions, and secure SDLC.

• IAPP Artificial Intelligence Governance Professional (AIGP) or ISO/IEC 42001 Lead Implementer
• Microsoft Certified:
  Cybersecurity Architect Expert (SC‑100) (or CISSP/CCSP as equivalents)
• Microsoft Certified:
  Information Protection Administrator (SC‑400)

• Microsoft Certified:
  Azure Security Engineer (AZ‑500)
• Cloud and AI Security Engineer (SC‑500)