AI & Application Security Lead

Bupa Arabia; Saudi Arabia; On-site; SAR 260,000 - 360,000; Full time

Job summary

Bupa Arabia is seeking an experienced security leader to govern Application and AI security across enterprise systems. You will define standards, oversee secure software practices, and drive threat modelling and risk-based decisions.

The role blends governance with hands-on secure SDLC enablement, demanding collaboration with cyber, privacy, and engineering teams to protect sensitive data while enabling AI innovation.

Qualifications

• Bachelor’s degree in computer science, Software Engineering, Cybersecurity, or related field.
• 4+ years of relevant experience.
• CSSLP, GWAPT, CISSP, or vendor AI security certifications preferred.
• Experience with securing APIs and DevSecOps.

Responsibilities

• Establish and maintain the Application Security and AI Security program.
• Define security standards, control requirements, and governance for apps and AI-enabled solutions.
• Align security with cybersecurity, privacy, data protection, enterprise architecture, and risk management.
• Maintain secure development guidelines for traditional apps, APIs, cloud-native apps, and AI solutions.
• Perform threat modelling for applications, APIs, cloud apps, and AI workflows.
• Review architectures to identify security design weaknesses; assess authentication, authorization, data flows.
• Identify risks such as prompt injection, data leakage, model misuse, unauthorized access.
• Embed security requirements across SDLC and promote DevSecOps.

Skills

Communication skills

Risk based approach

Secure SDLC

Threat modelling

APIs security

Source code review

AI/LLM security

DevSecOps

Regulated environments experience

CSSLP

GWAPT

CISSP

AI governance certifications

Education

Bachelor’s degree in Computer Science

Software Engineering

Cybersecurity

Related field

Job description

Bupa Arabia is seeking an experienced security leader to govern Application and AI security across enterprise systems. You will define standards, oversee secure software practices, and drive threat modelling and risk-based decisions.

The role blends governance with hands-on secure SDLC enablement, demanding collaboration with cyber, privacy, and engineering teams to protect sensitive data while enabling AI innovation.