Job Description

Job Description – Security Risk Assessor role

Roles and Responsibilities

• Perform risk assessments for applications, cloud workloads, and AI/ML solutions based on industry best practices across on‑prem, hybrid, and cloud‑native environments.
• Conduct security design and architecture reviews for applications, cloud platforms (IaaS, PaaS, SaaS), and AI systems (including AI agents, ML models, APIs)
• Identifying security gaps early in the design phase and reviewing change requests.
• Perform threat modelling for applications, APIs, microservices, cloud workloads, and AI use cases; analyse security impact and recommend appropriate technical and procedural controls.
• Perform AI security and governance assessments, including:
• Risks related to data privacy, training data integrity, model abuse, prompt injection, hallucination, over‑privileged access, and misuse
• Secure design of AI pipelines, integrations, and agent workflows
• Alignment with secure‑by‑design, responsible AI, and model risk management principles
• Evaluate solutions against secure configuration and best practices, including CSP native security services and AI platform controls.
• Provide secure, scalable, and simplified solutions to address day‑to‑day security challenges across application, cloud, and AI ecosystems.
• Articulate security and AI‑related risks in business context, enabling informed decision‑making and clear communication with engineering teams, product owners, architects, and leadership.

͏

What We’re Seeking

• Demonstrated experience in one or more of the following areas:
• Application and cloud risk assessments
• Security design and architecture reviews
• AI / ML security assessments
• Security audits, penetration testing, ethical hacking, static and dynamic code analysis
• Use of external tools to identify AI model risks.
• Working knowledge of AI and ML security considerations, such as:
• Security risks in AI model lifecycle (data, training, deployment, inference)
• Threats specific to AI systems (model manipulation, prompt injection, data leakage, abuse scenarios)
• Secure integration of AI services into enterprise applications
• Familiarity with industry regulations, frameworks, and standards, such as:
• NIST (CSF, SP 800 series)
• NIST AI RMF / ISO 42001
• OWASP (Top 10, API Security, AI Security guidance)
• PCI‑DSS
• ISO/IEC 27001, ISO 27017/27018, ISO 31000
• Experience in:
• Threat modelling and security reviews
• Vulnerability detection and remediation guidance
• Understanding attacker techniques and abuse scenarios, including AI‑enabled threats
• Exposure to one or more cloud platforms such as AWS, Azure, or GCP.
• Relevant information security and/or AI governance certifications (e.g., CISSP, CCSP, CISM, cloud security certifications, AI governance or AI security certifications) are an advantage.
• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, or a related field, with 8+ years of proven experience in application, cloud, and/or AI security.

͏

͏

͏