AI Security & Governance Engineer

Overview

Role Purpose

Key Responsibilities

• Translate AI governance policies into technical controls, playbooks, and automated checks, and
• implement the organizations AI GOVERNANCE FRAMEWORK
• across AI solutions.
• Onboard datasets/apps to Purview; define classifications, sensitivity labels, DLP, and access policies.
• Implement tenant, app, and data security baselines (Entra ID, PIM, Conditional Access, Defender).
• Establish AI risk assessment, threat modeling, red-teaming, jailbreak testing, and prompt/content safety.
• Operate auditability: Purview Audit, retention, investigation runbooks; evidence for reviews.
• DSPM for AI posture management; track risks, drive remediation, and report to governance councils.
• Work with Legal/Compliance on data residency, IP, and regulatory requirements; support vendor due diligence.

• AI Governance Stage Gates (organization-owned)

• Pre-development approval (data usage, risk classification, control baseline)
• Pre-production approval (security/privacy/model-risk evidence pack, release criteria)
• Post-deployment assurance (monitoring, drift/abuse checks, incident readiness & auditability)
• Vendor interface clarity: acts as organizations governance authority interfacing with vendor solution architects and delivery leads; does not design or implement AI solutions.
• Vendor governance strengthening: define and enforce governance requirements for external vendors covering transparency, data usage boundaries, audit rights, and assurance artefacts.

Minimum Experience Required

• 8–10 years in cloud security/governance with hands-on Microsoft security stack; exposure to AI systems.
• Experience implementing data protection and audit controls in regulated environments.

Mandatory Qualifications / Certifications

• Bachelor’s in CS/Information Security or equivalent.
• IAPP Artificial Intelligence Governance Professional (AIGP) or ISO/IEC 42001 Lead Implementer.
• Microsoft Certified: Cybersecurity Architect Expert (SC-100) (or CISSP/CCSP as equivalents).
• Microsoft Certified: Information Protection Administrator (SC-400).

Preferred Certifications

• Microsoft Certified: Azure Security Engineer (AZ-500) or Cloud and AI Security Engineer (SC-500)

Core Skills & Tools Required

• Purview (catalog, Information Protection, DLP, Audit), Entra ID (PIM, CA), Defender (for Cloud/Cloud Apps).
• Threat modeling for AI/LLM systems; prompt injection/jailbreak testing; safety filters and content moderation.
• KQL for investigations; eDiscovery fundamentals; evidence management.
• Policy-as-code (Azure Policy), automation (Logic Apps/Functions), and secure SDLC.

Experience

Salary Range

Work Location