Описание:
Brunswick is a global advisory firm that helps companies address high-stakes issues, navigate complex stakeholder relationships, and achieve high-impact outcomes. It provides expertise across financial and investment, regulatory and geopolitical, NGO, and workforce environments.
Задачи:
- Review and assess third-party AI tools, enterprise AI platforms, and new AI-enabled features, including ChatGPT, Claude, Microsoft Copilot, and other emerging technologies
- Review and assess requests relating to AI-enabled solutions, enterprise AI platforms, new features, integrations, and internally developed applications
- Provide security architecture guidance for applications and solutions developed or introduced by the AI team
- Support the implementation of security guardrails, governance processes, and secure design patterns for AI adoption across the firm
- Conduct STRIDE-based threat modelling for internally developed solutions, AI-enabled workflows, integrations, and automation use cases
- Assess risks associated with AI use cases, including data exposure, prompt injection, model misuse, third-party dependency risk, inappropriate access to sensitive information, and insecure integrations
- Advise on secure design principles, including identity and access management, data protection, logging, monitoring, encryption, resilience, and secure configuration
- Define and document security requirements, architecture decisions, design recommendations, and risk-based remediation actions
- Monitor emerging AI security risks, attacker techniques, and industry best practices, ensuring relevant mitigations are considered within Brunswick's environment
Требования:
- 5–7 Years of experience in cyber security, information security, security engineering, or a related technical security role
- Proven experience providing security guidance across technology projects, enterprise platforms, AI-related initiatives, third-party tools, cloud-based solutions, or internally developed applications
- Strong understanding of security architecture and secure design principles, including identity and access management, data protection, logging, monitoring, encryption, network security, and resilience
- Familiarity with AI-related technologies, enterprise AI platforms, large language models, agentic AI, and the security risks associated with AI adoption
- Experience conducting STRIDE-based threat modelling, technical risk assessments, or security design reviews
- Practical understanding of cloud and enterprise environments, particularly Microsoft 365, Azure, SaaS platforms, and modern workplace technologies
- Ability to translate technical security risks into clear, business-focused recommendations
- Strong written and verbal communication skills, with confidence engaging technical and non-technical stakeholders
- Understanding of security risks associated with third-party AI tools, internally developed AI applications, integrations, automation, and agent-based use cases
- Sound judgement, attention to detail, and the ability to balance security requirements with business needs
- Nice to have: Experience working in an ISO27001-aligned or regulated environment, ISC2 CISSP/CCSP/SSCP certifications, ISACA CISM/CISA/CRISC certifications, CompTIA Security+/CySA+/CASP+ certifications
Условия:
Employee benefits supporting financial future, health and wellness, family and community, and continuous professional development.
#J-18808-Ljbffr
security engineer for AI adoption employer: Enfint
As a leading innovator in AI products for major publishers, our company offers an inspiring work environment where creativity and technology intersect. We prioritise employee growth through continuous learning opportunities and foster a collaborative culture that values diverse perspectives. Located in a vibrant city, we provide competitive salaries, relocation support, and the chance to make a real impact in the media landscape.
