AI Security Expert Consultant

Keystone Solutions; Brussel Hoofdstad; Hybride; EUR 90 000 - 120 000; Plein temps

Résumé du poste

Keystone Solutions recherche un Expert en sécurité IA pour une mission de conseil sur site client. Vous évaluerez l’utilisation de l’IA/GenAI, la posture de sécurité et alignerez les livrables avec le cadre européen, sous la supervision du CISO.

Vous piloterez l’inventaire des risques, élaborerez des plans d’amélioration et assurerez le transfert de connaissances à l’équipe CISO, en mode hybride et temporaire.

Qualifications

• Maîtrise des exigences de conformité IA et RGPD.
• Capacité à réaliser des évaluations de risques IA/GenAI.
• Expérience avec l’audit et la gouvernance de l’IA.

Responsabilités

• Réaliser l’inventaire et l’évaluation des risques liés à l’IA/GenAI.
• Analyser la gouvernance IA: politiques, rôles et responsabilités.
• Évaluer les risques de fuite de données et d’injection de prompts.
• Évaluer la conformité avec l’AI Act et le GDPR.
• Conduire des entretiens et ateliers avec les parties prenantes.

Connaissances

AI/GenAI security

AI governance

GDPR/AI Act knowledge

Threat assessment

Shadow AI inventory

Formation

Master's degree

ISO/IEC 42001 Lead Auditor/Lead Implementer

CISSP

CISM

Description du poste

Mission Overview

Keystone Solutions is seeking an AI Security Expert for a consultancy mission at a client site. This role involves evaluating the use of AI/GenAI and the security posture within a federal police organization, reporting directly to the Chief Information Security Officer (CISO). As a consultant, you will be responsible for providing an independent assessment and actionable improvement plan, ensuring alignment with European AI regulations.

Key Responsibilities

• Conduct an inventory and risk assessment related to the use of AI/GenAI within the organization, including shadow AI.
• Analyze AI governance: policies, roles, and responsibilities for responsible AI usage.
• Evaluate risks of data leakage, prompt injection, and securing models in AI applications.
• Analyze compliance with the European AI Act and related obligations.
• Organize interviews and workshops with stakeholders (IT, data/AI teams, business, DPO).
• Document findings and develop a comprehensive improvement plan.
• Present results and recommendations to the CISO and stakeholders.
• Ensure knowledge transfer to the CISO team at the end of the mission.

Knowledge Areas

• AI/GenAI security: prompt injection, data leakage, model security, adversarial ML.
• AI governance and risk management (e.g., NIST AI RMF, ISO/IEC 42001).
• European AI Act and related regulations; key aspects of GDPR.
• Assessment and audit methodologies for AI applications and shadow AI.

Communication and Collaboration

• Clear and concise reporting to the CISO and management.
• Collaboration with the CISO, IT services, data/AI teams, business, and DPO.
• Fluency in Dutch or French is required; bilingualism is a plus; English is required.

Level and Experience

• Authoritative consulting with broad orientation (SFIA level 5 – Ensure, advise).
• Experienced expert in AI/GenAI security; able to operate autonomously in a short-term mission; explicitly not a junior profile.

Education

• Master's degree or equivalent through extensive relevant experience.
• Certifications are a plus (e.g., ISO/IEC 42001 Lead Auditor/Lead Implementer, AI governance certifications, CISSP, CISM).

Practical Information

• Status: Consultancy mission.
• Responsibility Level: SFIA level 5 – Ensure, advise (senior/expert).
• Reports to: CISO.
• Work Arrangement: Full-time; combination of office and remote work as per service agreements.
• Team: CISO Office, in collaboration with IT services, data/AI teams, and DPO.

Duration

15/10/2026 - 31/12/2026 3 months

• (full time)

Skills required

• Connaissance de l’AI Act européen et des exigences de conformité connexes (dont le lien avec le RGPD - Level: Expert - Most recent: Any time
• Connaissance de la gouvernance IA, des politiques et des cadres de responsabilité pour un usage resp - Level: Expert - Most recent: Any time
• Évaluation des menaces spécifiques à l’IA : injection de prompt, fuite de données, sécurisation des - Level: Expert - Most recent: Any time
• Rapportage clair et concis au niveau management/CISO, y compris sous contrainte de temps (mission co - Level: Expert - Most recent: Any time
• Réalisation d’évaluations des risques IA/GenAI, y compris l’inventaire du shadow AI - Level: Expert - Most recent: Any time

Language requirements

Dutch or French
Level Active knowledge
English
Level Active knowledge