AI Governance & Security Policy Architect

International Turnkey Systems - ITS; Kuwait City; On-site; KWD 24,000 - 36,000; Full time

Job summary

International Turnkey Systems - ITS in Kuwait City seeks an AI Security Governance & Policy Specialist to build and operate security governance for LLM/ML/AI across the full lifecycle, from use-case intake to retire.

You will draft enforceable AI policies and standards, translate frameworks into practical controls, perform AI security risk assessments, review designs and evidence, and ensure testing and monitoring meet NIST AI RMF and ISO/IEC 42001 baselines.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Risk/Compliance, or related discipline.
• 5–10 years of experience in cybersecurity governance, risk management, compliance, security assurance, or security architecture.
• Demonstrated ability to translate frameworks into practical, implementable controls, standards, and operating procedures.
• Practical understanding of LLM/AI solution patterns and their security implications.
• Working knowledge of NIST AI RMF.
• Familiarity with ISO/IEC 42001 concepts and mapping into enterprise ISMS environments.
• Working knowledge of ISO/IEC 27001-style control environments and audit expectations.

Responsibilities

• Draft, maintain, and publish AI security policies, standards, and minimum baselines for LLM/ML/AI solutions.
• Model onboarding and approval (internal and third-party models, versioning, provenance, licensing/usage constraints).
• Secure AI SDLC requirements (threat modeling, secure design, testing, change control, release gates).
• AI data governance requirements (data classification, retention, data minimization, leakage prevention, approved sources for RAG).
• Logging/telemetry requirements for AI apps and model endpoints (audit trails, redaction guidance, monitoring and alerting expectations).
• Maintain reusable governance artifacts and templates: intake forms, control checklists, evidence packs, exception/waiver forms, and sign-off criteria.
• Perform hands-on AI security risk assessments for new and changed use cases, documenting threat scenarios and residual risk and risk treatment.
• Maintain an AI security risk register with remediation actions, owners, dates, and closure evidence.
• Validate control implementation by reviewing architecture diagrams, IAM role assignments, secrets handling approach, logging configuration, test results, monitoring dashboards).
• Define and enforce minimum assurance requirements for AI solutions, including adversarial testing / red teaming minimum expectations.
• Secure code review expectations for AI application layers (prompt handling, retrieval logic, output handling, tool invocation).
• Pre-production and post-release monitoring requirements (abuse detection signals, data leakage indicators, model/API usage anomalies).
• Review and validate evidence that testing and monitoring were performed and met required outcomes.
• Ensure guidance remains aligned with OWASP LLM Top 10, and translate that guidance into actionable requirements and developer-friendly mitigation checklists.

Job description

International Turnkey Systems - ITS in Kuwait City seeks an AI Security Governance & Policy Specialist to build and operate security governance for LLM/ML/AI across the full lifecycle, from use-case intake to retire.

You will draft enforceable AI policies and standards, translate frameworks into practical controls, perform AI security risk assessments, review designs and evidence, and ensure testing and monitoring meet NIST AI RMF and ISO/IEC 42001 baselines.