This permanent, Aberdeen-based opportunity will play an important role in establishing a secure, compliant and well-governed AI environment.

The successful applicant will evaluate emerging AI technologies and translate their findings into practical security controls, governance standards and risk-management measures. Working across IT, Security, Legal, Data and wider business teams, they will help define appropriate guardrails, policies and approved usage patterns for AI.

The position will also assess new AI capabilities, identify security, privacy, compliance and operational risks, and highlight potential gaps in organisational readiness. It therefore requires someone who can bridge the gap between technical specialists and business stakeholders, supporting the safe and effective adoption of AI across the organisation.

Main duties and responsibilities

• Design, implement and maintain security controls across AI platforms, cloud services, enterprise applications and supporting infrastructure.
• Evaluate and monitor generative AI, machine-learning platforms and AI-enabled business applications, identifying risks including data leakage, prompt injection and privacy concerns.
• Conduct security assessments, threat modelling and architecture reviews for AI and wider technology solutions.
• Work with data, software engineering and cloud teams to embed security throughout AI development and deployment lifecycles.
• Monitor emerging vulnerabilities and developments within the AI threat landscape, recommending appropriate remediation measures.
• Support security incidents, compliance reviews and audit activities involving cybersecurity, data protection and AI governance.

Applicants to this role require

• Extensive experience within cybersecurity engineering, security operations or security architecture.
• Practical exposure to AI technologies, generative AI platforms, machine-learning environments, or AI governance and security controls.
• A strong understanding of recognised cybersecurity and compliance frameworks, including NIST, ISO 27001 and GDPR.
• Knowledge of AI-related security risks, including model security, prompt injection, data privacy, supply-chain risk and secure adoption practices.
• Experience applying security controls across enterprise technology environments, ideally including Microsoft platforms and Azure.
• Strong analytical, risk-assessment and problem-solving skills, alongside the ability to manage several initiatives concurrently.
• Effective communication skills and the ability to engage confidently with both technical and non-technical stakeholders.
• Applicants who meet many, but not necessarily all, of the requirements are encouraged to apply where they can demonstrate relevant transferable experience.

TMM Recruitment INDIT