AI Security Manager

Morgan McKinley; Santo Niño 1st; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Morgan McKinley is seeking a senior security professional in the Philippines to apply existing security expertise to AI use cases and support the organisation’s AI Security framework. You will work with technology teams to ensure security requirements are understood and adopted.

The role covers AI Security & Application Security, framework adoption, and stakeholder engagement, with a focus on secure development and risk reduction across AI-enabled solutions.

Qualifications

• 5–8+ years of cybersecurity experience.
• Background in Application Security, Product Security, Security Architecture or DevSecOps.
• Experience conducting security assessments and vulnerability reviews.
• Familiarity with GenAI, LLMs or AI technologies.
• Understanding of AI security risks and frameworks such as OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS.
• Strong stakeholder management and influencing skills.

Responsibilities

• Support the AI Security framework, standards and controls.
• Apply secure-by-design principles to AI-enabled applications and solutions.
• Conduct security reviews of AI applications, APIs, integrations and platforms.
• Identify and assess AI-specific risks such as prompt injection, data leakage and insecure integrations.
• Provide practical security guidance to development teams throughout the SDLC.
• Translate AI security requirements into practical controls and guidelines for technology teams.
• Drive adoption and adherence to AI security requirements across engineering teams.
• Identify gaps in AI security controls and drive remediation with stakeholders.
• Support security assessments, vulnerability reviews and AI-related testing activities.
• Act as an AI Security SME and stay abreast of emerging AI security threats.

Skills

Application Security

DevSecOps

Security Architecture

GenAI Security

Stakeholder Management

Job description

The role will focus on applying existing security expertise to AI use cases, supporting the implementation of the organisation's AI Security framework and working with technology teams to ensure security requirements are understood and adopted.

Key Responsibilities:

AI Security & Application Security

• Support the implementation of the organisation's AI Security framework, standards and security controls.
• Apply Application Security and secure-by-design principles to AI-enabled applications and solutions.
• Conduct security reviews of AI applications, APIs, integrations and AI platforms.
• Identify and assess AI-specific risks such as prompt injection, data leakage, insecure integrations and excessive permissions.
• Provide practical security guidance to development and technology teams throughout the SDLC.

Framework Adoption & Assurance

• Help translate AI security requirements into practical controls and guidelines for technology teams.
• Work with engineering and application teams to drive adoption and adherence to AI security requirements.
• Identify gaps in AI security controls and work with stakeholders to drive remediation.
• Support security assessments, vulnerability reviews and AI-related testing activities.
• Contribute to the continuous improvement of the organisation's AI Security framework.

Stakeholder Engagement

• Partner with Application Security, Cybersecurity, Technology Risk, GRC and engineering teams.
• Act as an AI Security SME and provide guidance on emerging AI security risks.
• Influence stakeholders and drive security improvements without direct people-management responsibility.
• Keep abreast of emerging AI security threats, vulnerabilities and industry practices.

Requirements:

• 5-8+ years of cybersecurity experience, preferably with a strong background in Application Security, Product Security, Security Architecture or DevSecOps.
• Strong understanding of secure application development and SDLC practices.
• Experience conducting application security assessments, architecture reviews or vulnerability assessments.
• Exposure to GenAI, LLMs, AI applications or emerging AI technologies.
• Understanding of AI security risks and frameworks such as OWASP LLM Top 10, NIST AI RMF or MITRE ATLAS.
• Strong stakeholder management and influencing skills, with the ability to drive security requirements across technology teams.
• Experience in financial services or another regulated environment would be advantageous.