AI Governance & Security Manager

EY; Riyadh; On-site; SAR 420,000 - 660,000; Full time

Job summary

EY in Riyadh is seeking a Manager to lead AI governance, risk management, responsible AI, and AI security engagements for financial institutions and government entities across the Middle East. You will design enterprise governance frameworks, operating models, and risk methodologies while collaborating with executive stakeholders to drive trustworthy AI adoption.

You will guide AI control frameworks, threat modeling, and compliance with evolving regulations, mentoring delivery teams and shaping

Qualifications

• A bachelor's or master’s degree in information technology, cyber security, computer science, data science etc.
• Excellent communication skills with a consulting mindset.
• 7-12 years of experience in cybersecurity, technology risk, IT risk, compliance, governance, resilience, or consulting services. Along with this 3-4 years of experience in AI Governance, AI Risk Management, AI Theat Modelling, etc.
• Experience leading client-facing engagements and managing teams.
• Excellent communication, workshop facilitation, and report-writing skills.
• Experience interacting with senior leadership and executive stakeholders.

Responsibilities

• Lead AI Governance assessments and maturity evaluations across enterprise AI and GenAI environments.
• Design and implement AI Governance Frameworks, Operating Models, Policies, Standards, Procedures, and Guidelines.
• Develop enterprise AI Governance strategies aligned with organizational objectives and regulatory requirements.
• Establish AI Governance Committees, RACI models, and decision-making structures.
• Create AI lifecycle governance processes covering ideation, development, validation, deployment, monitoring, and retirement.
• Develop AI Risk Management Frameworks and methodologies.
• Establish AI risk taxonomies, risk assessment methodologies, and AI control frameworks.
• Conduct AI and GenAI risk assessments covering security, privacy, regulatory, operational, model, and third-party risks.
• Develop AI risk registers, heatmaps, risk scoring frameworks, and remediation roadmaps.
• Facilitate risk workshops and stakeholder interviews across business and technology teams.
• Perform AI security assessments for Generative AI, LLM, RAG, Agentic AI, and Cognitive Search solutions.
• Conduct AI threat modeling exercises leveraging OWASP LLM Top 10, MITRE ATLAS, STRIDE, and other industry practices.
• Assess AI-specific threats including prompt injection, indirect prompt injection, data leakage, model abuse, hallucinations, retrieval poisoning, and excessive agency.
• Evaluate effectiveness of AI guardrails, content filtering, RBAC, DLP, monitoring, logging, and security controls.
• Develop AI Security Blueprints and AI Security Control Frameworks.
• NIST AI RMF, ISO/IEC 42001, ISO 27001, NIST CSF, GDPR, EU AI Act, PDPL, SAMA-related requirements, Regional AI governance requirements.

Skills

AI Governance

AI Risk Management

Responsible AI

AI Security

Regulatory Compliance

Executive Stakeholder Communication

Leadership & Mentoring

Education

Bachelor's or Master's in IT/Cyber Security/CS/Data Science

Job description

EY in Riyadh is seeking a Manager to lead AI governance, risk management, responsible AI, and AI security engagements for financial institutions and government entities across the Middle East. You will design enterprise governance frameworks, operating models, and risk methodologies while collaborating with executive stakeholders to drive trustworthy AI adoption.

You will guide AI control frameworks, threat modeling, and compliance with evolving regulations, mentoring delivery teams and shaping