AI Security Governance Lead

Jana Small Finance Bank; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

Jana Small Finance Bank seeks an AI Security Governance Lead to own information security across AI initiatives, ensuring design, development, deployment, and operation align with security policies and RBI rules.

The role emphasizes Security-by-Design, Privacy-by-Design, and Compliance-by-Design across the AI lifecycle to reduce cyber and regulatory risks while enabling responsible AI adoption.

Qualifications

• Strong understanding of AI, ML, LLMs, AI agents, RAG, and the AI model lifecycle.
• Knowledge of AI security risks (prompt injection, model poisoning, data leakage, hallucinations).
• Strong governance, risk, and compliance (GRC) and Secure SDLC knowledge.

Responsibilities

• Lead Information Security for all AI initiatives, ensuring compliance with policies and RBI regulations.
• Embed Security-by-Design, Privacy-by-Design, and Compliance-by-Design across the AI lifecycle.
• Minimize cyber, operational, and regulatory risks in AI deployments.

Skills

AI security

GRC

Secure SDLC

Cloud security

IAM

Education

Bachelor's degree

Tools

SIEM

Cloud security platforms

Job description

Role & responsibilities

The AI Security Governance Lead will serve as the Information Security lead for all AI initiatives across the Bank, ensuring that Artificial Intelligence solutions are designed, developed, deployed, and operated in compliance with the Bank's Information Security policies, RBI regulations, applicable legal requirements, and industry best practices. The role will embed Security-by-Design, Privacy-by-Design, and Compliance-by-Design principles throughout the AI lifecycle, enabling secure and responsible AI adoption while minimizing cyber, operational, and regulatory risks.

Preferred candidate profile

• Strong understanding of Artificial Intelligence (AI), Machine Learning (ML), Generative AI, Large Language Models (LLMs), AI Agents, Retrieval-Augmented Generation (RAG), and the AI model lifecycle.
• Knowledge of AI security risks, including prompt injection, adversarial AI, model poisoning, data leakage, model theft, hallucination risks, AI supply chain security, and AI agent security.
• Strong understanding of Information Security Governance, Risk Management, Compliance (GRC), and Secure SDLC.
• Experience in conducting security architecture reviews, risk assessments, and third-party security assessments.
• Knowledge of cloud security, application security, API security, IAM, and data protection principles.
• AI-Sec-OPS certification / training.
• Familiarity with AI governance frameworks and standards, including NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, ISO/IEC 42001, and ISO/IEC 23894.
• Strong understanding of RBI Cyber Security Framework, Digital Personal Data Protection (DPDP) requirements, ISO 27001, and applicable regulatory expectations for the banking sector.

Preferred Qualifications

• Bachelor's degree in computer science, Information Security, Cyber Security, Information Technology, or a related field.
• 5 to 7 years of experience in Information Security, Cyber Security Governance, Risk Management, Security Architecture, or Technology Risk.
• Experience in banking, financial services, or other regulated industries.
• Professional certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or cloud security certifications are preferred.
• AI security or AI governance certifications are an added advantage.