AI Security Governance Architect

🔥 1 minute ago

🇪🇸 Spain – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

🚔 Compliance

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Plain Concepts

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2006

💼 Consulting

📣 Marketing

📦 Logistics

Consulting • Marketing • Logistics

Plain Concepts is an innovative technology company committed to delivering customized solutions across a wide array of digital needs. With a focus on cutting-edge areas like Artificial Intelligence, cybersecurity, cloud computing, and Internet of Things (IoT), Plain Concepts is a partner for companies looking to enhance operations and secure their digital landscapes. As a recognized Microsoft AI Partner, Plain Concepts aims to transform data into insightful information and improve business applications through bespoke IoT developments. Additionally, the company fosters revolutionary advancements in augmented and virtual reality, while driving digital transformation initiatives with Microsoft 365 and a strong focus on sustainability and social commitment.

📋 Description

• Define and evolve AI security governance frameworks covering AI use case registration, risk classification, security controls, approvals, exceptions, monitoring and periodic reassessment • Align AI security governance with NIST AI RMF, NIST Generative AI Profile, ISO/IEC 42001, OWASP Top 10 for LLM Applications and the EU AI Act • Assess AI, GenAI and agentic AI use cases from a cybersecurity perspective • Evaluate risks including prompt injection, sensitive data leakage, identity and access management, excessive agent permissions, model exposure, third-party AI services, data residency and AI supply chain risks • Translate AI risks into security policies, technical requirements, architecture patterns, guardrails, evidence requirements, ownership and acceptance criteria • Define security requirements and architecture patterns for internal copilots, Microsoft 365 Copilot, custom GenAI applications, RAG systems, AI agents, ML models, vendor AI solutions and low-code/no-code AI automations • Integrate AI security governance with HiddenLayer, Sentra, Zenity, GRC, IAM, DLP, SIEM/SOC, cloud security, CMDB and data governance environments • Define and improve AI security governance deliverables, including control frameworks, use case classification models, security requirements, architecture patterns, risk acceptance processes, security review templates, KPI/KRI dashboards and maturity roadmaps • Translate complex cybersecurity risks into clear requirements and recommendations for technical and executive stakeholders

🎯 Requirements

• 8+ years of experience in cybersecurity, with a strong background in security governance, security architecture, risk management, AppSec or Cloud Security • Strong understanding of AI and GenAI security risks, including LLM application security, prompt injection, sensitive data leakage, RAG security, AI agent permissions, model/API exposure, model supply chain and third-party AI services • Experience designing and operationalizing security governance and control frameworks • Ability to turn policies and risk requirements into practical controls, processes and security requirements • Knowledge of AI security and governance frameworks, such as NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLM Applications and related AI risk and security standards • Ability to work across security, architecture and business teams • Excellent communication and documentation skills • Fluent in English and Spanish • Experience with AI governance programs, GenAI security assessments or AI Security Posture Management (AISPM) preferred • Experience securing enterprise AI environments such as Microsoft 365 Copilot, custom GenAI applications, RAG solutions or AI agents preferred • Knowledge of cloud security architecture, Secure SDLC/DevSecOps, DSPM, GRC or AI-related SOC monitoring preferred • Familiarity with HiddenLayer, Sentra, Zenity, Wiz, Microsoft Purview, Defender, CSPM/CWPP, DLP or SIEM/SOAR platforms preferred • Knowledge of third-party AI risk management and security control evidence automation preferred • Understanding of privacy and AI regulatory requirements, including GDPR, DPIAs, data classification and the EU AI Act preferred

🏖️ Benefits

• Flexible schedule 35 Hours / Week • Fully remote work (optional) • Flexible compensation (restaurant, transport, and childcare) • Fully free health insurance, with a co-payment for dental services • Individual budget for training or equipment and free Microsoft certifications • English lessons • Birthday day off • Monthly bonus for electricity and Internet expenses at home • Discount on gym plan and sports activities • Plain Camp (annual team-building event) • Events attendance and speakers • Welcome pack • Baby basket • Christmas basket • Discount portal for employees • Latest technological tools • Phone screen and 2 interviews with the team

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume