AI Security & Risk Architect

• The AI Information Security Specialist will play a key role in supporting the secure and resilient use of artificial intelligence across Standard Life.
• The role will focus on ensuring information security risks are appropriately identified, assessed and managed as AI use cases are designed, approved and operated under the AI Governance Framework.
• Working closely with technology, architecture, cyber security, data, risk and business teams, the role will provide expert advice and challenge on information security risks associated with AI, including model security, data protection controls, access management, resilience and third party risk.
• The role will support the business to embed proportionate security controls that enable innovation while maintaining strong security outcomes.
• Key responsibilities will include advising on information security considerations for AI use cases, supporting security risk assessments and control design, contributing to AI use case reviews through the AI Review Board and other governance forums, and maintaining AI related information security governance artefacts, registers and guidance.
• The role will also support the development of AI specific information security guidance and awareness, helping colleagues understand secure design and usage expectations and promoting consistent, well controlled practices across the organisation.

Requirements

• Experience working in information security, cyber risk, technology risk or security governance roles within a regulated environment.
• Familiarity with relevant frameworks or standards such as ISO 27001, ISO 42001, NIST Cyber Security Framework, or NIST AI Risk Management Framework.
• Strong understanding of information security concepts and controls, such as access management, data security, secure system design, vulnerability management, resilience, and third-party security risk.
• Experience advising on security risks in technology change initiatives, digital delivery or complex systems, with the ability to provide clear, practical guidance.
• Ability to assess, challenge and document security risks and controls in a structured and proportionate way, particularly in evolving or ambiguous technical contexts.

ATS Optimization Keywords
Below are skills and terms extracted directly from this job posting to improve Applicant Tracking System (ATS) visibility. This unique feature helps candidates tailor their applications more effectively - a feature exclusive to JobTailor job listings.

Hard Skills

• information security
• cyber risk
• technology risk
• security governance
• ISO 27001
• ISO 42001
• NIST Cyber Security Framework
• NIST AI Risk Management Framework
• access management
• data security

Soft Skills

• advising
• clear communication
• practical guidance
• risk assessment
• structured documentation
• challenging
• collaboration
• innovation support
• awareness promotion
• understanding expectations