Job Description

AI Security & Risk Assessor (AI-GRC)
Function: Group CISO Office | Location: Bengaluru, India

Role Summary
Responsible for performing independent security, risk, and compliance assessments of AI, GenAI, and AI-agent-based systems. The role focuses on identifying AI-specific risks, validating control effectiveness, and providing actionable remediation guidance to ensure secure, compliant, and responsible AI adoption.

R͏oles & Responsibilites

•    Create or review the AI risk assessment methodology. Research from Industry on risks related to AI. Take feeds from analyst, forums and best practices related to AI model usage for opensource and subscribed version.
•    Explore external tools that can be leveraged to evaluate open-source models risks.
•    Provide feeds to monitoring tools to detect AI based signatures.
•    Identify AI-specific risks such as prompt injection, hallucination, bias, model drift, data leakage, and over-privileged AI actions.
•    Conduct end-to-end AI/GenAI security and risk assessments across AI agents, LLM integrations, and AI platforms.
•    Perform secure AI architecture and design reviews covering IAM, API permissions, data flows, prompt governance, and logging.
•    Execute AI-focused threat modeling and abuse/misuse case analysis.
•    Assess compliance with NIST-aligned controls, SOC2 requirements, and internal AI governance policies.
•    Review evidence including architecture diagrams, model usage documentation, access reviews, and audit artifacts.
•    Evaluate third-party and vendor AI solutions for data, model, and contractual risks.
•    Document clear risk statements, severity, business impact, and remediation recommendations.
•    Support automation and standardization of AI risk assessment processes and templates.
•    Clearly communicate findings to engineering, application owners, and risk stakeholders.

K͏ey Skills

•    Identification of internal and external threats towards AI / GenAI and conduct Risk Assessment
•    Secure AI Architecture & Design Reviews
•    AI Threat Modeling & Abuse Case Analysis
•    Application & API Security
•    Data Privacy & Model Risk Management
•    NIST AI RMF, EU AI Act, ISO 42001, bias, privacy, cybersecurity, fraud prevention
•    ISO/IEC 42001 AI Management System Certification
•    Strong Documentation and Communication Skills
•    Past Skills in programming, Python, Java etc.

͏Qualifications

• 8–12+ years of experience in cyber security, application security, or risk assessment roles, with exposure to AI/GenAI systems.
• Hands-on experience in security design reviews, threat modeling, and GRC assessments.
• Preferred to have certifications such as CISSP, CISM, AAIA, AA or are desirable.

͏