AI Security Governance Lead

Role & responsibilities

The AI Security Governance Lead will serve as the Information Security lead for all AI initiatives across the Bank, ensuring that Artificial Intelligence solutions are designed, developed, deployed, and operated in compliance with the Bank's Information Security policies, RBI regulations, applicable legal requirements, and industry best practices. The role will embed Security-by-Design, Privacy-by-Design, and Compliance-by-Design principles throughout the AI lifecycle, enabling secure and responsible AI adoption while minimizing cyber, operational, and regulatory risks.

Preferred candidate profile

• Strong understanding of Artificial Intelligence (AI), Machine Learning (ML), Generative AI, Large Language Models (LLMs), AI Agents, Retrieval-Augmented Generation (RAG), and the AI model lifecycle.
• Knowledge of AI security risks, including prompt injection, adversarial AI, model poisoning, data leakage, model theft, hallucination risks, AI supply chain security, and AI agent security.
• Strong understanding of Information Security Governance, Risk Management, Compliance (GRC), and Secure SDLC.
• Experience in conducting security architecture reviews, risk assessments, and third-party security assessments.
• Knowledge of cloud security, application security, API security, IAM, and data protection principles.
• AI-Sec-OPS certification / training.
• Familiarity with AI governance frameworks and standards, including NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, ISO/IEC 42001, and ISO/IEC 23894.
• Strong understanding of RBI Cyber Security Framework, Digital Personal Data Protection (DPDP) requirements, ISO 27001, and applicable regulatory expectations for the banking sector.

Preferred Qualifications

• Bachelor's degree in computer science, Information Security, Cyber Security, Information Technology, or a related field.
• 5 to 7 years of experience in Information Security, Cyber Security Governance, Risk Management, Security Architecture, or Technology Risk.
• Experience in banking, financial services, or other regulated industries.
• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or cloud security certifications are preferred.
• AI security or AI governance certifications are an added advantage.