> Markdown version of [/jobs/ext/4145045-ciso-ai](https://www.wearedevelopers.com/jobs/ext/4145045-ciso-ai). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# CISO AI

- **Company:** AXA
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Training Data, Artificial Intelligence, Cyber Security, Data Security, Machine Learning, Technical Data Management Systems, Feature Engineering, Generative AI, Usage Tracking, Machine Learning Operations
- **Published:** October 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=09d09011ff3ace94

## About the Role

More than 10 years of experience in Information Security or a related field, with demonstrated experience in a leadership role focused on data science, AI/ML, or the security thereof.

Technical skills

 * Good understanding of the AI/ML lifecycle
 * Knowledge of common AI frameworks
 * Familiarity with AI-specific security threats (adversarial ML, etc.) and controls
 * Knowledge of data privacy and emerging AI regulations is essential

Soft skills / transversal skills

Profile

 * Fluent in English. Outstanding oral and written communication skills with proven ability to develop and present concise information
 * Strong multi-cultural understanding
 * Experience of interacting with Directors and all levels of management
 * Team player and able to collaborate, influence and guide others

Strategic Mindset

 * A passion for innovation balanced with a pragmatic, risk-based approach. Ability to think strategically and establish a new function in a complex, global organization
 * Maintains a wider perspective, aligns actions and contributes to the enhancement of the overall organizational strategy, including outputs from benchmarking activities and reviews
 * Understands and articulates the projected direction of the organization and how changes to it might impact the group
 * Is aware of trends in the external environment and key differentiators vis-à-vis competition and uses this information to anticipate how these changes would impact the organization

Leadership / Stakeholder Management / Communication:

 * A visionary leader capable of navigating ambiguity and influencing a wide range of stakeholders to adopt new security paradigms in a matrix organization
 * Ability to build consensus and drive collaboration between highly technical data science teams, business units, AXA Group functions, and AXA entities.
 * Exceptional ability to communicate in English, translating complex AI security concepts into clear, actionable guidance for diverse audiences from developers to senior executives

## Description

Your purpose is to build and run a holistic AI security program for AXA. You will establish the governance, risk management framework, and security controls to protect our AI/ML models and data, ensuring that AXA's use of AI is not only powerful but also secure and trustworthy.

Main missions

Your mission is to build the program around the NIST Cybersecurity Framework, adapted for AI:

 * Govern: Develop and follow implementation the Group's AI Security Strategy, in line with responsible AI principles and emerging regulations (e.g., EU AI Act). Establish policies for secure AI development, data usage, and model governance
 * Identify: Lead risk assessments methodology design on AI models and systems, focusing on unique threats like data poisoning, model evasion, adversarial attacks, and prompt injection. Ensure a consolidate inventory of critical AI assets
 * Protect: Define security standards and architecture patterns for the AI/ML lifecycle, from secure data acquisition and feature engineering to model training and deployment. Ensure the confidentiality and integrity of models and training data
 * Detect: Oversee the implementation of monitoring mechanisms to detect model drift, anomalous behavior, and security attacks against AI systems. Define AI-specific incident precursors for the SOC
 * Respond & Recover: Define and test the incident response playbook for AI-specific security events, such as a compromised model or a severe data leak through a Generative AI service