Required Skills & Experience
Skill Area
Market-standard Expectations
Information Security
Strong understanding of information security principles, control frameworks, cyber risk management, security architecture, and enterprise security governance.
Risk & Governance
Experience conducting security reviews, risk assessments, control validation, remediation tracking, and risk reporting.
AI Risk
Good understanding of AI, GenAI, AI agents, model security, data protection, privacy, third-party risk, prompt injection, misuse, and responsible AI considerations.
Business Advisory
Ability to translate cybersecurity concerns into business-relevant risk language and pragmatic mitigation options.
Stakeholder Management
Strong influencing, communication, and senior stakeholder engagement skills across business, technology, risk, compliance, and cybersecurity teams.
Regulatory Awareness
Understanding of security, privacy, compliance, and governance expectations applicable to AI.
Operating Model
Ability to operate effectively in complex, matrixed, and fast-evolving environments while balancing security, and operational constraints.
Preferred Qualifications
- Previous experience as a Information Officer, Information Security Officer, Cyber Risk Manager, Security Governance Lead, or Security Architect.
- Knowledge of offensive security concepts, attacker behavior, threat actor methodologies, and adversarial AI risks.
- Experience supporting AI governance, responsible AI, cloud security, data protection or risk programs.
- Certifications such as CISSP, CISM, CRISC, ISO 27001, AZ-500, or equivalent practical experience.
- Experience in regulated enterprise environments, including banking, financial services, technology, or critical infrastructure.
Ideal Candidate Profile
- Senior cybersecurity advisor who can challenge AI initiatives constructively without blocking innovation unnecessarily.
- Comfortable working with ambiguity, emerging risk areas, and fast-moving AI delivery teams.
- Able to communicate clearly with executives while maintaining sufficient technical understanding to assess real security risk.
- Strong collaborator who can balance business priorities, security controls, governance expectations, and operational realities.
