AI Security Expert

What you will do

You will conduct an independent assessment of AI and GenAI usage, governance and security posture within a Belgian public-sector organisation, reporting directly to the Chief Information Security Officer. This is a temporary assignment of approximately three months, focused on delivering an objective state of play and a substantiated improvement plan.

Your main tasks include:

• Conduct an inventory and risk assessment of AI and GenAI usage across the organisation, including shadow AI, AI tools, chatbots and copilots
• Analyse AI governance: policies, roles and responsibilities for responsible AI use
• Evaluate AI-specific security risks including data leakage, prompt injection and model security in AI applications
• Assess alignment with the European AI Act and related compliance obligations
• Organise interviews and workshops with stakeholders (IT, data/AI teams, business units, DPO)
• Document findings and develop a substantiated improvement plan with concrete recommendations
• Present results and recommendations to the CISO and stakeholders
• Ensure knowledge transfer to the CISO team at the close of the assignment

You will deliver:

• Inventory and risk assessment of AI/GenAI usage within the organisation
• Analysis report on AI governance: policy, roles and responsibilities
• Analysis of data leakage risks, prompt injection and model security in AI applications
• Gap/compliance analysis against the European AI Act and related obligations
• Substantiated improvement/action plan with concrete recommendations
• Executive summary for the CISO and management

What we are looking for

You are an experienced expert in AI and GenAI security, capable of operating autonomously within a short-term assignment. This is explicitly not a junior profile.

Essential expertise:

• AI/GenAI security: prompt injection, data leakage, model security, adversarial ML
• AI governance and risk management (e.g. NIST AI RMF, ISO/IEC 42001)
• European AI Act and related regulation; broad understanding of GDPR
• Assessment and audit methodologies for AI applications and shadow AI
• Clear and concise reporting to CISO and management level, including under time constraints
• Conducting AI/GenAI risk assessments, including shadow AI inventory

Communication and collaboration:

• Clear and concise reporting to the CISO and management
• Collaboration with the CISO, IT services, data/AI teams, business units and the DPO
• Dutch or French required; bilingualism is an asset; English is required

Level and experience:

• Senior/expert level (SFIA level 5 – Ensure, advise): providing authoritative advice under broad direction
• Experienced expert profile in AI/GenAI security, operational autonomously within a short assignment

Education:

• Master's degree, or equivalent through extensive relevant experience
• Certifications are an asset (e.g. ISO/IEC 42001 Lead Auditor/Lead Implementer, AI governance certifications, CISSP, CISM)

The setting

This assignment runs from mid-October 2026 to the end of December 2026, approximately three months in total. You will be based in Brussels with a hybrid working arrangement combining office and remote work according to service agreements.

You will work within the CISO office, collaborating with IT services, data/AI teams and the DPO.

You can join us for this assignment as a freelancer or as an employee of HumanInTech. Same role, same team. If you join as an employee, your employment continues beyond this assignment. When it ends, we’ll work together to find your next assignment.

Location: Brussels, hybrid

Employer / contracting party: HumanInTech

Applications close (Brussels time): September 29, 2026 at 2:00 AM

Engagement: Freelance or employed by HumanInTech

Working hours: Full-time

Experience: 6–10 years or more

Education: Master's or more

Published: September 2026