AI Security

h3AI Security Governance Architect | GenAI / LLM / RAG / Agentic AI /h3pbLocation: /b Belgium – candidates must already be based in Belgium or be happy to relocate themselves to belgium within 1-2 months. /ppbEngagement: /b Contract /ph3Role Overview /h3pWe are seeking an experienced bAI Security Governance Architect /b to join a CISO organisation and help define, design and embed the security capabilities required to support the organisation's rapidly evolving adoption of AI. /ppThis is a senior role sitting at the intersection of bAI, Cyber Security, Security Architecture and Governance /b. The successful candidate will work across IT Risk, Security Architecture, security engineering and operational security, while partnering closely with AI architects, engineers, data scientists, product owners and technology teams. /ppThe role requires someone who understands modern AI architectures at a technical level – including bGenerative AI, LLMs, RAG and Agentic AI /b – and can translate emerging AI risks into practical security controls, reusable architecture patterns, governance frameworks and a sustainable AI Security roadmap. /ppThis is bnot purely an AI Governance position /b. The successful candidate must be technically credible and capable of understanding AI architectures, threat modelling them and designing appropriate security controls. /ph3Key Accountabilities /h3p1. AI Security Governance /ppDefine and validate the bAI Security target state, principles, scope and multi-year capability roadmap /b, aligned with CISO and Technology priorities. /ppDesign and embed the AI Security governance model, including: /pulliDecision rights and accountabilities /liliRACI /liliSecurity approval gates /liliRisk acceptance and exceptions /liliEvidence and assurance requirements /li /ulpDevelop and maintain policies, standards, minimum security requirements, control objectives and implementation guidance for AI systems and AI-enabled technology. /ppCreate an bAI Security control baseline /b, ensuring governance and control design reflects recognised frameworks and guidance including: /pulliOWASP guidance for LLM and Agentic AI applications /liliMITRE ATLAS /liliSAFE AI framework /liliISO/IEC 42001 /liliISO/IEC 23894 /liliApplicable AI, cyber-security and regulatory requirements /li /ulp2. Secure AI Architecture Reusable Security Controls /ppBuild and maintain AI threat scenarios, attack-surface maps and risk scenario catalogues, using bOWASP and MITRE ATLAS /b as key threat references. /ppAssess current and target AI architectures including: /pulliLLMs and other models /liliDatasets and data pipelines /liliEmbeddings and vector stores /liliTools and plugins /liliMemory /liliInference and deployment environments /li /ulpDesign and publish reusable bAI Security requirements, reference architectures and security patterns /b. /ppDefine appropriate: /pulliTrust boundaries /liliIdentity and access models /liliSecrets management /liliData-security rules /liliNetwork protections /liliAPI and tool security /liliRuntime safeguards /liliLogging and monitoring /liliSecurity testing /liliHuman oversight /li /ulpTranslate business and technical requirements into secure AI solution architectures that are scalable, supportable and proportionate to risk. /pp3. AI Security Readiness Capability Roadmap /ppAssess the organisation's current bAI Security maturity /b across people, processes and technology. /ppIdentify quick wins, structural gaps and capability dependencies and translate these findings into prioritised remediation plans and clear definitions of done. /ppDesign target capabilities covering areas including: /pulliAI data security /liliIdentity and secrets /liliSecure AI supply chain /liliAI system security testing /liliVulnerability management /liliLogging and monitoring /li /ulpEstablish clear roadmaps, milestones, deliverables, ownership and progress reporting for the implementation of these capabilities. /ph34. Stakeholder Engagement AI Security Expertise /h3pAct as a senior bCISO subject-matter expert for AI Security /b, providing authoritative guidance to Technology, AI delivery teams and control functions. /ppPartner with AI architects, engineers, data scientists, product owners and platform teams to ensure security is incorporated during solution design rather than becoming a late-stage compliance exercise. /ppFacilitate: /pulliAI threat-modelling sessions /liliSecurity workshops /liliAI Security readiness assessments /li /ulpCommunicate AI Security risks, decisions and options effectively to technical teams, senior management, auditors, risk functions and regulators. /ppMonitor developments across AI security standards, threat intelligence, research and regulation and translate relevant changes into actionable internal requirements. /ph3Candidate Profile /h3pThe successful candidate should have substantial experience within bCyber Security Architecture, Security Engineering, Technology Risk or Security Governance /