AI Security & Technology Risk Manager

Kerry Consulting; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Kerry Consulting is seeking an experienced AI Security Risk Manager to provide risk oversight over the organisation's adoption of AI, Generative AI and emerging technologies. You will identify and manage cybersecurity, technology and data risks, partnering with Technology, Cybersecurity and business teams to enable secure AI adoption.

You will conduct risk assessments across the AI lifecycle, review controls, and develop risk frameworks while communicating risks to senior stakeholders and

Qualifications

• 8+ years in cybersecurity, technology risk, information security, security architecture or technology assurance.
• Strong understanding of risk frameworks and AI security considerations.
• Familiarity with AI lifecycle security and data protection controls.

Responsibilities

• Provide risk oversight across AI, ML and Generative AI initiatives.
• Conduct security risk assessments across the AI lifecycle from design to operation.
• Assess AI-specific threats such as prompt injection, data leakage and model manipulation.
• Review security controls across AI applications, models, APIs and data pipelines.
• Assess data protection, access management, encryption and IAM in AI environments.
• Review security testing approaches including vulnerability assessments and AI red-teaming.
• Assess risks with third-party AI platforms and services.
• Develop AI security risk frameworks, policies and minimum controls.
• Monitor evolving AI threats and regulatory requirements and advise governance bodies.

Skills

Cybersecurity

Technology risk

Information security

Security architecture

Stakeholder management

Education

CISSP

CISM

CRISC

CCSP

Tools

NIST AI RMF

ISO 27001

ISO 42001

OWASP AI/LLM

Job description

We are seeking an experienced AI Security Risk Manager to provide risk oversight and challenge over the organisation's adoption of AI, Generative AI and emerging technologies.

The role will focus on identifying and managing cybersecurity, technology and data risks associated with AI solutions, while partnering with Technology, Cybersecurity, Data and business teams to enable secure and responsible AI adoption.

Key Responsibilities:

• Provide risk oversight and challenge across AI, Machine Learning and Generative AI initiatives.
• Conduct security risk assessments across the AI lifecycle, from design and development through deployment and ongoing operation.
• Assess AI-specific threats including prompt injection, data leakage, model manipulation, insecure integrations and excessive agency.
• Review security controls across AI applications, models, APIs, data pipelines and supporting cloud infrastructure.
• Assess data protection, access management, encryption, DLP and identity controls supporting AI environments.
• Review security testing approaches including vulnerability assessments, adversarial testing and AI red-teaming.
• Assess risks associated with third-party AI platforms, models and service providers.
• Develop and enhance AI security risk frameworks, policies, standards and minimum control requirements.
• Conduct thematic reviews and monitor control gaps, risk acceptances and remediation activities.
• Provide risk advice on emerging technologies including LLMs, AI agents and AI-enabled applications.
• Monitor evolving AI threats, regulations and industry standards and assess their implications for the organisation.
• Present material AI security risks and recommendations to senior stakeholders and governance committees.

Requirements:

• More than 8 years of experience across cybersecurity, technology risk, information security, security architecture or technology assurance.
• Strong understanding of cybersecurity, technology risk and control frameworks.
• Good understanding of AI/ML, Generative AI and LLM technologies and their associated security risks.
• Knowledge of application security, cloud security, APIs, IAM, data protection, vulnerability management and DevSecOps.
• Experience conducting technology/security risk assessments and assessing control effectiveness.
• Familiarity with frameworks such as NIST AI RMF, ISO 27001, ISO 42001, MITRE ATLAS and OWASP AI/LLM guidance would be advantageous.
• Strong stakeholder management skills with the ability to translate technical risks into clear business impact.
• Relevant certifications such as CISSP, CISM, CRISC or CCSP would be advantageous.