About the role
Lead enterprise AI/GenAI security & governance programs aligned to NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS. Establish AI risk taxonomy, guardrails, approval workflows, and control standards across 1LoD and 2LoD. Oversee cloud security posture management (CSPM/CNAPP) and drive remediation across GCP, AWS, Azure. Architect Zero Trust, IAM/PAM, and privileged?access security frameworks (CyberArk, Conditional Access). Embed DevSecOps and SSDLC guardrails — SAST/DAST/SCA, IaC security, container security, artifact signing. Lead SIEM/XDR detection engineering, UEBA, threat hunting, and incident?response modernization. Govern compliance across NY DFS 500, IRDAI, ISO 27001/27701/22301, NIST 800?53, DPDP Act, SOC 2, PCI. Provide board?level advisory on technology risk, AI risk posture, and cyber maturity improvements.