Lensys
Suivez-nous

AI Security Expert

You will spearhead the assessment of AI/GenAI usage, governance, and inherent security risks for a critical public safety organization. This role involves developing a strategic improvement plan to ensure compliance with the EU AI Act and bolster the client's digital defenses against emerging threats.

CONTEXT

In an era where artificial intelligence is rapidly transforming every sector, its application within sensitive domains like public safety presents both immense opportunities and formidable challenges. Our client, a major player in its sector, is at the vanguard of leveraging cutting-edge AI and Generative AI technologies to enhance its mission-critical operations, from predictive analytics to intelligent surveillance and automated threat detection. However, the adoption of such powerful tools comes with a profound responsibility to ensure their ethical deployment, absolute security, and unwavering compliance with evolving regulatory landscapes, notably the groundbreaking EU AI Act. This mission is about proactively identifying and mitigating the unique security vulnerabilities and governance complexities that AI systems introduce, safeguarding highly sensitive data, preventing algorithmic bias, and ensuring the trustworthiness of AI deployments. You will be instrumental in shaping the future of secure AI adoption within an organization dedicated to protecting its community.

ACTIVITIES

  • Conduct comprehensive assessments of existing and planned AI/GenAI initiatives, evaluating their security posture, data privacy implications, and adherence to best practices.
  • Analyze and define robust governance frameworks for AI development and deployment, ensuring ethical considerations, transparency, and accountability are embedded from conception.
  • Identify, analyze, and prioritize security risks associated with AI models, data pipelines, and inference processes, including prompt injection, model inversion, and data poisoning attacks.
  • Ensure the client's AI strategy is fully compliant with the stringent requirements of the EU AI Act, translating legal obligations into actionable technical and procedural controls.
  • Develop a detailed, actionable improvement plan for the Chief Information Security Officer (CISO), outlining strategic recommendations for enhancing AI security and governance.
  • Collaborate with AI developers, data scientists, and legal teams to integrate security-by-design principles into the entire AI lifecycle.

EXPECTED ACHIEVEMENTS

  • A comprehensive understanding and documentation of AI/GenAI security risks and vulnerabilities within the organization's landscape.
  • A strategic and actionable improvement plan for AI security and governance, directly enhancing the CISO's strategic roadmap.
  • Ensured compliance with the EU AI Act, significantly reducing legal and reputational risks associated with AI deployment.
  • Implementation of robust controls and best practices for AI security, safeguarding sensitive data and critical operations from sophisticated AI-specific threats.
  • Increased organizational awareness and capability in managing AI security and ethical considerations, fostering a culture of responsible AI innovation.
  • A clear framework for the secure and ethical adoption of future AI technologies, positioning the client as a leader in responsible AI deployment.

ENVIRONMENT

This role demands deep expertise in the rapidly evolving field of AI security and governance. You will operate within an environment that is actively exploring and deploying various AI and Generative AI (GenAI) technologies, including machine learning models, natural language processing, and computer vision. Your work will involve applying and interpreting cybersecurity frameworks such as NIST and ISO 27001 in an AI context, alongside a thorough understanding of risk management methodologies. Crucially, a profound knowledge of the EU AI Act and its implications is essential. You will utilize various assessment tools, collaborate with data science platforms, and engage with security information and event management (SIEM) systems to analyze potential threats. The environment emphasizes collaboration with technical and non-technical stakeholders, requiring strong communication skills to translate complex security concepts into practical recommendations.