This job is with JTI, an inclusive employer and a member of myGwork – the largest general platform for the LGBTQ+ business community. Department: Information Security & Risk Management
Position: AI Security Manager
Contract Type: Local, Permanent

AI Security Manager

The AI Security Manager is responsible for ensuring that all AI systems are secure, resilient, and compliant with regulatory and internal risk standards. The role establishes and enforces controls across the AI lifecycle to prevent misuse, protect data and model integrity, and manage emerging AI-specific risks.
Acting as the bridge between security, risk, and AI & Innovation teams, the AI Security Manager ensures that AI capabilities are deployed safely, monitored effectively, and governed in line with enterprise risk appetite. Governance, Risk & Compliance • Define AI security policies aligned with standards such as NIST AI Risk Management Framework and ISO guidelines • Conduct AI risk assessments, including ethical, legal, and privacy considerations • Ensure compliance with evolving regulations (e.g., EU AI Act, data protection laws)• Maintain audit trails and documentation for AI system decisions and controls
~ AI Security Architecture & Controls • Define and implement security controls across the AI/ML lifecycle (data ingestion, model training, deployment, and inference). • model hardening, secure APIs, access controls)• Evaluate and mitigate risks such as model inversion, data poisoning, and adversarial attacks. • Continuously assess vulnerabilities in models, datasets,



and dependencies • Lead red-teaming exercises focused on adversarial AI and abuse scenarios (prompt injection, model extraction). • Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Security, Data Science, or a related discipline Advanced certifications in security or risk management are preferred (e.g., Proven experience in governance, risk, and compliance (GRC) and/or security architecture roles Hands-on exposure to AI/ML systems, data platforms, or advanced analytics environments Experience implementing or aligning with security frameworks (e.g., Demonstrated involvement in incident response, threat modeling, or resilience planning. Experience working cross-functionally with technology, engineering, data science, and legal/compliance teams
~ Fluent English written & spoken
~ Familiar with cloud security, APIs, and data protection in distributed environments • Able to design and implement risk-based control frameworks for emerging technologies, with experience conducting risk assessments and translating technical risks into clear business impact, and a solid grasp of the regulatory landscape affecting AI and data usage • Capable of integrating AI systems into enterprise resilience and incident response frameworks, including defining monitoring, alerting, and response mechanisms for complex environments • Strong stakeholder management across technical and non-technical teams, with the ability to challenge constructively and enforce standards where needed, combined with clear communication skills to articulate risk, trade-offs, and control effectiveness

Phone screening with Talent Advisor Assessment tests Interviews Offer.

📌 Security Control Manager (Madrid)
🏢 Jti
📍 Madrid