AI Security Governance Architect

Location: Spain; remote work

Company

hirify.global is a global technical consultancy delivering custom software projects, specialized technical consulting, and training across artificial intelligence, blockchain, and other technologies.

What you will do

• Define and evolve AI security governance frameworks covering use-case registration, risk classification, controls, approvals, exceptions, monitoring, and reassessment.
• Align governance with NIST AI RMF, the NIST Generative AI Profile, ISO/IEC 42001, OWASP Top 10 for LLM Applications, and the EU AI Act.
• Assess AI, GenAI, and agentic AI use cases for prompt injection, data leakage, IAM, excessive agent permissions, model exposure, third-party services, data residency, and supply-chain risks.
• Translate risks into policies, technical requirements, architecture patterns, guardrails, evidence requirements, ownership models, and acceptance criteria.
• Define security requirements for copilots, RAG systems, AI agents, ML models, vendor AI solutions, and low-code/no-code automations.
• Integrate governance with GRC, IAM, DLP, SIEM/SOC, cloud security, CMDB, data governance, and tools including HiddenLayer, Sentra, and Zenity.

Requirements

• 8+ years of cybersecurity experience, with a strong background in security governance, security architecture, risk management, AppSec, or Cloud Security.
• Strong understanding of AI and GenAI security risks, including LLM application security, prompt injection, sensitive data leakage, RAG security, agent permissions, model/API exposure, model supply chain, and third-party AI services.
• Experience designing and operationalizing security governance and control frameworks and translating policies and risk requirements into practical controls, processes, and security requirements.
• Knowledge of AI security and governance frameworks, including NIST AI RMF, ISO/IEC 42001, OWASP Top 10 for LLM Applications, and related standards.
• Ability to work across security, architecture, and business teams and communicate recommendations to technical and executive stakeholders.
• Excellent communication and documentation skills for executive-ready materials and detailed security and control documentation.
• Fluent English and Spanish required.

Nice to have

• Experience with AI governance programs, GenAI security assessments, or AI Security Posture Management.
• Experience securing Microsoft 365 Copilot, custom GenAI applications, RAG solutions, or AI agents.
• Knowledge of cloud security architecture, Secure SDLC/DevSecOps, DSPM, GRC, or AI-related SOC monitoring.
• Familiarity with HiddenLayer, Sentra, Zenity, Wiz, Microsoft Purview, Defender, CSPM/CWPP, DLP, or SIEM/SOAR platforms.
• Knowledge of third-party AI risk management, security-control evidence automation, GDPR, DPIAs, data classification, and the EU AI Act.

Culture & Benefits

• Fully remote work with a flexible schedule of 35 hours per week.
• Flexible compensation for restaurant, transport, and childcare expenses.
• Free health insurance with co-payment for dental services, plus a monthly electricity and internet allowance.
• Individual training or equipment budget, free Microsoft certifications, and English lessons.
• Birthday day off, gym and sports discounts, team-building events, and additional employee perks.
• Flat, collaborative, multidisciplinary teams with an agile, transparent, technical, and knowledge-sharing culture.

Hiring process

• Three steps: a phone screen followed by two interviews with the team.