AI Security & Compliance Engineer

My Financial Services client is seeking to recruit a AI Security & Compliance Engineer / Specialist on an initial 6 month contract based in London. It is hybrid and will require 3x days onsite per week.

Read on to fully understand what this job requires in terms of skills and experience If you are a good match, make an application.

You will ensure the secure, ethical, and compliant development of AI solutions across the organisation. This role is central to embedding security, privacy, and regulatory controls into the design and engineering of AI products-including Microsoft Copilot, custom AI agents, and broader generative AI applications.

You will work closely with engineering, architecture, legal, security and risk teams to define and implement controls across the AI lifecycle, ensuring alignment with internal policies and external regulations such as the EU AI Act, FCA guidance, and GDPR. A key part of this role involves leveraging Microsoft Purview to enforce data governance, classification, and compliance across AI systems.

You will also collaborate with the AI Governance Lead to assess and support the onboarding of new AI systems into the bank, ensuring that all solutions meet the required standards for security, transparency, and regulatory compliance.

Accountabilities & Responsibilities

Secure AI Engineering & Design Collaboration

Partner with engineering teams to embed security-by-design and privacy-by-design principles into AI agents, copilots, and automation workflows.
Define and implement technical controls for:
Data access and protection
Model transparency and explainability
Human oversight and fallback mechanisms
Audit logging and traceability

AI Risk & Compliance Architecture

Design and enforce compliance frameworks for high-risk AI systems, aligned with the EU AI Act, FCA/PRA AI Principles, and ISO/IEC 42001.
Conduct technical risk assessments on AI use cases, focusing on model behaviour, data governance, and user interaction.
Collaborate on the development of model cards, risk registers, and post-market monitoring plans.

Microsoft Purview Integration

Use Microsoft Purview to implement and manage:
Data classification and sensitivity labels
Data loss prevention (DLP) policies
Information protection and access controls
Compliance reporting and audit trails for AI-related data flowsAI System Onboarding & Governance Support

Work with the AI Governance Lead to assess new AI systems being introduced into the bank.
Evaluate solutions for compliance with internal policies and external regulations.
Provide technical input on risk mitigation strategies and onboarding documentation.

Security & DevSecOps Integration

Integrate AI security controls into CI/CD pipelines and MLOps workflows.
Use tools such as Azure Key Vault, Microsoft Entra ID, and GitHub Actions for secure deployment and access management.
Monitor AI systems using Azure Monitor, Log Analytics, and Application Insights.

Policy Implementation & Regulatory Alignment

Translate regulatory requirements into actionable engineering guidelines and reusable controls.
Ensure AI systems avoid prohibited practices and meet obligations around:
Transparency and user awareness
Data minimisation and lawful processing
Continuous monitoring and incident response

Cross-Functional Collaboration & Governance

Partner with legal, compliance, and architecture teams to align AI development with enterprise risk and governance frameworks.
Contribute to internal working groups on Responsible AI, AI governance, and ethical design.
Educate stakeholders on emerging AI risks and mitigation strategies.

Qualification and skills:

Strong technical background in AI/ML systems, with experience embedding security and compliance into product design.
Expert-level knowledge of Microsoft Purview for data governance, classification, and compliance.
Familiarity with AI governance frameworks (e.g., NIST AI RMF, ISO/IEC 42001, Microsoft Responsible AI Standard).
Hands-on experience with:
Azure AI services, Microsoft Copilot Studio, and Power Platform
Secure deployment tools (e.g., Azure Key Vault, RBAC, CI/CD pipelines)
Data protection and privacy controls (e.g., DLP, masking, classification)
Knowledge of regulatory frameworks including the EU AI Act, GDPR, and FCA guidance.
Experience working in cross-functional teams across engineering, legal, and risk domains.
Excellent communication and documentation skills, with the ability to translate complex requirements into technical solutions