Must Have Technical/Functional Skills
• 10+ years of information security experience including cloud and AI/ML.
• Experience with public cloud security (AWS, Google Cloud).
• Relevant certifications preferred (CISSP, CCSP, etc.).
• Insurance or financial services experience preferred.
• Expert knowledge of AI/ML, GenAI, and LLM security concepts.
• Deep expertise in cloud security architecture (AWS, Google Cloud).
• Well rounded Cybersecurity knowledge and hands-on experience with multiple domains of security
• [including Data Security, Application Security, Identity Security, Endpoint Security, etc].
• Strong understanding of DevSecOps and secure software development.
• Understanding of global regulations and corresponding risk governance, legal and privacy aspects.
• Ability to translate technical risks into business insights.
• Strong communication and influencing skills, with executive presence.
• Ability to work independently in complex environments.
• Strong program and project management capabilities.
Roles & Responsibilities
• Define and evolve AI security strategy, roadmap, and architecture aligned to business objectives and risk tolerance.
• Design and implement secure AI and cloud-native security architectures using defense-in-depth principles.
• Lead threat modeling, risk assessments, and security evaluations of AI systems and data pipelines.
• Integrate AI security controls into SDLC, CI/CD, and DevSecOps practices.
• Establish AI security frameworks aligned to industry standards (e.g., NIST, OWASP) and enterprise policies.
• Develop AI security policies, standards, and best practices.
• Partner with Legal, Risk, and AI Governance on compliance and regulatory requirements.
• Provide guidance on securing AI workloads across cloud environments (e.g. Google Cloud).
• Serve as enterprise SME and a point of contact for AI security.
• Evaluate AI security tools and support monitoring, vulnerability management, and incident readiness.