Cybersecurity Specialist AI Security (Senior)

Rhox; Brussel; Sur place; EUR 90 000 - 125 000; Plein temps

Résumé du poste

Rhox seeks a senior adviser to independently assess AI and GenAI security posture, governance and regulatory alignment, and to translate findings into a prioritized improvement plan. Reporting to the CISO, you will work across IT services, data and AI teams, business stakeholders and the DPO.

You will organize interviews/workshops, consolidate findings, document evidence and deliver actionable conclusions with knowledge transfer to the CISO’s team at closure.

Qualifications

• Senior or expert experience in AI/GenAI security with autonomous delivery on short assignments.

Responsabilités

• Inventory AI and GenAI use, including shadow AI, AI tools, chatbots and copilots.

Connaissances

AI/GenAI security

AI risk governance

NIST AI RMF

ISO/IEC 42001

European AI Act

GDPR knowledge

AI assessments

Prompt injection

Data leakage

Model security

Adversarial ML

Executive reporting

SFIA level 5

Formation

Master’s degree, or equivalent experience

Description du poste

A federal public service is assessing how artificial intelligence (AI) and generative AI (GenAI) are used and secured across its organisation. Reporting to the CISO, this senior role independently evaluates the AI security posture, governance and regulatory alignment, then turns findings into a prioritised improvement plan. It combines European AI Act expertise with practical analysis of prompt injection, data leakage and model security.

The mission

This assignment provides an objective view of current AI and GenAI use, including shadow AI, AI tools, chatbots and copilots. You assess associated security risks, governance arrangements and compliance with European AI Act and related requirements, including links with GDPR. Key outputs are an AI and GenAI risk inventory, a governance analysis, a compliance gap analysis, a practical improvement plan and an executive summary.

The work supports prioritisation and decisions by the CISO and management, while final follow-up and decisions remain with the CISO. You work across IT services, data and AI teams, business stakeholders and the DPO. You organise interviews and workshops, consolidate findings and document evidence clearly. The assignment requires an autonomous senior adviser who can produce useful conclusions under time pressure and transfer knowledge to the CISO's team at closure.

Your responsibilities

• Inventory AI and GenAI use, including shadow AI, AI tools, chatbots and copilots.
• Perform AI and GenAI security risk assessments across identified uses and applications.
• Analyse AI governance for responsible AI use, including policies, roles and responsibilities.
• Evaluate prompt injection and data leakage risks, alongside model security and adversarial machine learning.
• Assess alignment with the European AI Act and related compliance obligations.
• Run interviews and workshops with IT, data and AI, business and DPO stakeholders.
• Document findings, develop an improvement plan and present recommendations to CISO and management.

Your profile

Essential skills

• Senior or expert experience in AI/GenAI security, with autonomous delivery on short assignments.
• Knowledge of AI risk governance, including NIST AI RMF and ISO/IEC 42001.
• Knowledge of European AI Act requirements and related compliance, including GDPR connections.
• Experience with assessment or audit methods for AI applications and shadow AI.
• Practical understanding of prompt injection, data leakage, model security and adversarial machine learning.
• Clear, concise reporting to management and the CISO, including under time pressure.
• Ability to provide authoritative advice under broad direction, consistent with SFIA level 5, Ensure, advise.

Preferred skills

• ISO/IEC 42001 Lead Auditor or Lead Implementer, AI governance certification, CISSP or CISM.
• Bilingual Dutch and French communication.

Languages

• Dutch, B2.
• French, B2.
• English, B2.

Education

• Master’s degree, or equivalent experience gained through extensive relevant work.

Working context

• Reports to the CISO and collaborates with IT services, data and AI teams, business stakeholders and the DPO.
• Work is organised through stakeholder interviews, workshops, risk assessment and documented analysis.
• The assignment closes with knowledge transfer to the CISO’s team.