AI Security Specialist (f/m/d)

AI Security Specialist (f/m/d)

Our AI Security Specialists Team is looking for YOU!

We are Uniper

The AI Security Specialist ensures the enterprise AI platform is secure, compliant, and ethically governed, enabling teams to build and run AI solutions with approved models and consistent guardrails. The role embeds security, privacy, and responsible AI controls into core platform capabilities (model onboarding and lifecycle, IAM, data connectors, content safety, observability, and audit logging). It reduces regulatory, legal, and reputational risks especially for GDPR and the EU AI Act and ensures audit-ready evidence through traceability and monitoring. Interested? Then we will look forward to meeting you!

Your responsibilities

• Design, establish, and operationalize platform-level security, ethics, and compliance frameworks across the AI platform lifecycle (capabilities, services, and operating model).
• Define and maintain governance controls for platform capabilities such as model onboarding/approval, agent registration and policy enforcement, unified model access (gateway), and lifecycle gates across Dev/UAT/Prod.
• Ensure platform compliance with GDPR, the EU AI Act, and other applicable legal and regulatory obligations, translating requirements into enforceable technical controls and operational procedures.
• Establish and maintain model governance requirements for the approved model list, including provenance, licensing considerations, region/hosting constraints, change management, and decommissioning.
• Define and validate platform safety requirements, including content safety policies (input/output filtering), prompt injection and data leakage protections, and secure-by default patterns for agent/tool use.
• Define platform identity and access requirements (e.g., Entra ID integration, key management/rotation, least privilege, environment separation), and ensure access is attributable and auditable.
• Define platform observability, auditability, and evidence requirements (logging, telemetry, traceability, cost/usage accountability) to support governance reporting and security monitoring.
• Conduct AI risk assessments focused on platform capabilities and shared services, including misuse scenarios, robustness, supply-chain/vendor risks, and the security posture of onboarded models.
• Support internal and external audits of AI systems by coordinating platform evidence (control design, control testing, logs, approvals, exceptions, and remediation tracking).

Additional responsibilities (optional):

• Provide support for Data Protection Impact Assessments (DPIAs), Legitimate Interest Assessments (LIAs), and other privacy/compliance assessments specifically tied to platform usage patterns (e.g., connectors, RAG data, model region selection, agent capabilities).
• Contribute to platform dashboards and KPIs for responsible AI compliance, control effectiveness, model onboarding quality, policy violations, and audit readiness.
• Support platform incident response activities related to AI services, including investigations, stakeholder communications, and post-incident corrective actions

Your profile

• You hold a bachelor’s or master’s degree in computer science, information security, data science, law, or a comparable discipline.
• You bring demonstrated expertise in information security, privacy engineering, data protection, and enterprise risk management, combined with an in‑depth understanding of GDPR, the EU AI Act, and widely accepted responsible AI principles such as fairness, transparency, accountability, and human oversight.
• You have proven experience conducting risk assessments and compliance reviews for technology solutions, defining appropriate controls, and documenting evidence to ensure audit readiness.
• You are hands‑on in working with AI governance tooling, including model registries, approval workflows, policy enforcement mechanisms, and evidence repositories.
• You possess a practical understanding of the AI and machine learning lifecycle, from data sourcing and model development to evaluation, deployment, monitoring, and change management, and you are able to translate regulatory and policy requirements into concrete technical and organizational measures such as standards, procedures, and templates.
• You are familiar with recognized security and risk frameworks, including NIST, ISO 2700x, and the OWASP Top 10 for LLM applications, and you know how to apply them effectively in an AI context.
• You demonstrate strong stakeholder management and communication skills, enabling you to provide clear, actionable guidance to both technical and non‑technical audiences.
• You bring a growth mindset with openness to new technologies and a willingness to continuously develop relevant skills and capabilities.
• You uphold high standards of professional integrity, discretion, and judgment when handling sensitive or regulated information.
• In addition to these core qualifications, it would be considered an advantage if you have experience performing AI security testing and assurance activities, such as prompt injection testing, data leakage testing, adversarial robustness testing, and red teaming.
• Knowledge of secure cloud architecture and controls for AI workloads, including identity and access management, secrets management, private endpoints, and logging or monitoring, would further strengthen your profile.
• Familiarity with data governance and compliance practices, including data classification, lineage, retention, and records management for training and inference data, would also be beneficial.
• Experience supporting audits and assurance assessments, such as internal or external audits, ISO 27001, SOC 2, or equivalent frameworks, including remediation planning and tracking, would be a valuable asset.
• Demonstrated experience collaborating effectively with offshore partners and operating across time zones would round off your technical and organizational capabilities.
• You communicate fluently in English at a business level, and German proficiency is an advantage for collaboration and stakeholder engagement across Uniper’s international environment.
• You demonstrate a high level of professional ethics, integrity, and accountability, combined with strong analytical capabilities and exceptional attention to detail.
• You can influence and align cross‑functional stakeholders without formal authority, fostering a culture of compliance, transparency, and responsible AI adoption across teams and domains.