Manager - AI Security (Information Technology)

About the Role

The Manager of AI Security spearheads the formulation, deployment, and ongoing enhancement of AI-specific security measures throughout the organization. This role is crucial in protecting the company from AI-facilitated threats such as deepfake-driven business email compromise, AI-crafted phishing schemes, and synthetic identity fraud. Additionally, the manager ensures the secure utilization of AI platforms, copilots, and agent-based systems internally. Acting as the definitive expert on AI security, this position collaborates closely with Technology Governance, Risk and Compliance (GRC), Internal Audit, and the AI Assurance Manager to establish a comprehensive defensive strategy for AI technologies within the company. The role demands familiarity with cybersecurity protocols and regulations, including compliance with the Cyber Security Act 2018. A deep understanding of diverse application and hardware environments supports the secure architectural design responsibilities. The ideal candidate is an effective communicator who works well across departments to nurture a culture of secure AI-driven innovation.

Key Duties and Responsibilities

• Craft and maintain the AI Security strategy in line with the organization's risk appetite.
• Define and implement secure-by-design architectural approaches for AI/ML systems, encompassing generative AI, agentic systems, machine learning models, and third-party AI solutions.
• Establish governance frameworks and control measures compliant with NIST AI Risk Management Framework, ISO 42001, OWASP LLM Top 10, IMDA, MAS, and the EU AI Act.
• Serve as the AI security subject matter expert for senior leadership, providing updates including Board-level communications.
• Develop AI security awareness initiatives targeted at business units exposed to high risk.
• Oversee engagements with AI security vendors, managed security service providers (MSSPs), and red team experts, including budget management.
• Collaborate with AI Assurance teams to address and resolve audit and assurance findings.
• Maintain surveillance of AI security posture, evaluating risks and control efficacy.
• Design and implement security controls to protect AI agents, copilots, and automation workflows.
• Implement safeguards against prompt injections, filtered output mechanisms, sandbox environments, and tool restrictions.
• Apply credential scoping and monitoring controls effectively.
• Integrate AI-specific detection capabilities within Security Information and Event Management (SIEM) systems and Security Operations Center (SOC) pipelines.
• Develop and execute incident response protocols targeting AI-related threats such as deepfake BEC, model exploitation, agent escape, and AI-driven data breaches.
• Deploy defenses against AI-enabled external attack vectors including phishing, synthetic identity fraud, and social engineering techniques empowered by AI.
• Lead AI-focused red teaming exercises and adversarial testing, coordinating internal teams and external providers.
• Drive remediation efforts addressing vulnerabilities identified during security evaluations.
• Continuously monitor AI systems, enforce security controls, and coordinate with SOC teams on threat detection and incident responses.
• Manage remediation of AI security risks through to resolution and ensure readiness for AI cybersecurity incidents.
• Ensure continuous improvement and effectiveness of AI-related control measures.
• Oversee coordination of AI security operations across IT, Risk Management, Operations, and third-party vendors.
• Govern the lifecycle management of AI security tools and their operational deployment.

Qualifications & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field.
• At least 7 to 10 years of professional experience in cybersecurity, including a minimum of 3 years dedicated to AI/ML security or ML Security Operations (MLSecOps).
• Proven hands-on experience securing live AI platforms like generative AI, agentic systems, or machine learning pipelines.
• Ability to articulate complex AI risk issues effectively to board members and senior management.
• Holder of advanced security certifications such as CISSP, CISM, or equivalents.
• Working knowledge of cybersecurity frameworks and standards including NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, and MITRE ATLAS.
• Excellent written and verbal communication skills with a track record of engaging executive-level stakeholders.

Additional Information

By applying for this position, candidates agree to the collection, usage, and disclosure of their personal information by ST Logistics and its recruitment affiliates for employment purposes and statistical analysis, in accordance with prevailing data protection regulations.