AI Security & Risk Assessor

Wipro; Bengaluru; On-site; INR 4,500,000 - 6,500,000; Full time

Benefits offered by this job

Disabilities welcome

Job summary

Wipro in Bengaluru, India seeks an AI Security & Risk Assessor (AI-GRC) to perform independent security, risk, and compliance assessments of AI, GenAI, and AI-agent-based systems. You will identify AI-specific risks, validate controls, and provide remediation guidance for secure, compliant AI adoption.

Responsibilities include developing AI risk methodologies, reviewing tools, monitoring AI signatures, threat modeling, and ensuring NIST SOC2 alignment.

Qualifications

• 8–12+ years in cyber security, app security or risk assessment with AI/GenAI exposure.
• Hands-on security design reviews, threat modeling and GRC assessments.
• Certifications such as CISSP, CISM, AAIA, AA desirable.

Responsibilities

• Create or review AI risk assessment methodologies and industry risk research.
• Evaluate external tools to assess open-source model risks.
• Provide feeds to monitoring tools to detect AI-based signatures.
• Identify AI-specific risks: prompt injection, bias, model drift, data leakage.
• Conduct end-to-end AI risk assessments for AI agents, LLMs and platforms.
• Perform secure AI architecture reviews covering IAM, API permissions, data flows, logging.
• Lead AI-focused threat modeling and abuse/misuse case analysis.
• Ensure compliance with NIST AI RMF, SOC2 and internal AI governance policies.
• Review evidence including diagrams, usage docs, access reviews, and audit artifacts.
• Evaluate third-party/vendor AI solutions for data/model/contract risks.
• Document risk statements, severity, business impact, and remediation." ,"Support automation and standardization of AI risk assessment processes and templates.","Communicate findings clearly to engineering and risk stakeholders."],
• CoT_job_summary_short
• COMPANY NAME: WiproKEY POINTS: AI risk assessment, secure AI architecture, threat modeling, GRC

Skills

Threat assessment

Secure AI architecture

AI threat modeling

Application security

Data privacy & model risk

AI governance & standards

Certification awareness

Documentation & communication

Programming: Python/Java

Job description

Role Summary
Responsible for performing independent security, risk, and compliance assessments of AI, GenAI, and AI-agent-based systems. The role focuses on identifying AI-specific risks, validating control effectiveness, and providing actionable remediation guidance to ensure secure, compliant, and responsible AI adoption.

• Create or review the AI risk assessment methodology. Research from Industry on risks related to AI. Take feeds from analyst, forums and best practices related to AI model usage for opensource and subscribed version.
• Explore external tools that can be leveraged to evaluate open-source models risks.
• Provide feeds to monitoring tools to detect AI based signatures.
• Identify AI-specific risks such as prompt injection, hallucination, bias, model drift, data leakage, and over-privileged AI actions.
• Conduct end-to-end AI/GenAI security and risk assessments across AI agents, LLM integrations, and AI platforms.
• Perform secure AI architecture and design reviews covering IAM, API permissions, data flows, prompt governance, and logging.
• Execute AI-focused threat modeling and abuse/misuse case analysis.
• Assess compliance with NIST-aligned controls, SOC2 requirements, and internal AI governance policies.
• Review evidence including architecture diagrams, model usage documentation, access reviews, and audit artifacts.
• Evaluate third-party and vendor AI solutions for data, model, and contractual risks.
• Document clear risk statements, severity, business impact, and remediation recommendations.
• Support automation and standardization of AI risk assessment processes and templates.
• Clearly communicate findings to engineering, application owners, and risk stakeholders.

Job Description

AI Security & Risk Assessor (AI-GRC)

Function: Group CISO Office | Location: Bengaluru, India

Role Summary
Responsible for performing independent security, risk, and compliance assessments of AI, GenAI, and AI-agent-based systems. The role focuses on identifying AI-specific risks, validating control effectiveness, and providing actionable remediation guidance to ensure secure, compliant, and responsible AI adoption.

R͏oles & Responsibilites

• Create or review the AI risk assessment methodology. Research from Industry on risks related to AI. Take feeds from analyst, forums and best practices related to AI model usage for opensource and subscribed version.
• Explore external tools that can be leveraged to evaluate open-source models risks.
• Provide feeds to monitoring tools to detect AI based signatures.
• Identify AI-specific risks such as prompt injection, hallucination, bias, model drift, data leakage, and over-privileged AI actions.
• Conduct end-to-end AI/GenAI security and risk assessments across AI agents, LLM integrations, and AI platforms.
• Perform secure AI architecture and design reviews covering IAM, API permissions, data flows, prompt governance, and logging.
• Execute AI-focused threat modeling and abuse/misuse case analysis.
• Assess compliance with NIST-aligned controls, SOC2 requirements, and internal AI governance policies.
• Review evidence including architecture diagrams, model usage documentation, access reviews, and audit artifacts.
• Evaluate third-party and vendor AI solutions for data, model, and contractual risks.
• Document clear risk statements, severity, business impact, and remediation recommendations.
• Support automation and standardization of AI risk assessment processes and templates.
• Clearly communicate findings to engineering, application owners, and risk stakeholders.

K͏ey Skills

• Identification of internal and external threats towards AI / GenAI and conduct Risk Assessment
• Secure AI Architecture & Design Reviews
• AI Threat Modeling & Abuse Case Analysis
• Application & API Security
• Data Privacy & Model Risk Management
• NIST AI RMF, EU AI Act, ISO 42001, bias, privacy, cybersecurity, fraud prevention
• ISO/IEC 42001 AI Management System Certification
• Strong Documentation and Communication Skills
• Past Skills in programming, Python, Java etc.

͏Qualifications

• 8–12+ years of experience in cyber security, application security, or risk assessment roles, with exposure to AI/GenAI systems.
• Hands-on experience in security design reviews, threat modeling, and GRC assessments.
• Preferred to have certifications such as CISSP, CISM, AAIA, AA or are desirable.

Reinvent your world.We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.

Applications from people with disabilities are explicitly welcome.