A federal public service is assessing how artificial intelligence (AI) and generative AI (GenAI) are used and secured across its organisation. Reporting to the CISO, this senior role independently evaluates the AI security posture, governance and regulatory alignment, then turns findings into a prioritised improvement plan. It combines European AI Act expertise with practical analysis of prompt injection, data leakage and model security.
The mission
This assignment provides an objective view of current AI and GenAI use, including shadow AI, AI tools, chatbots and copilots. You assess associated security risks, governance arrangements and compliance with European AI Act and related requirements, including links with GDPR. Key outputs are an AI and GenAI risk inventory, a governance analysis, a compliance gap analysis, a practical improvement plan and an executive summary.
The work supports prioritisation and decisions by the CISO and management, while final follow-up and decisions remain with the CISO. You work across IT services, data and AI teams, business stakeholders and the DPO. You organise interviews and workshops, consolidate findings and document evidence clearly. The assignment requires an autonomous senior adviser who can produce useful conclusions under time pressure and transfer knowledge to the CISO's team at closure.
Your responsibilities
- Inventory AI and GenAI use, including shadow AI, AI tools, chatbots and copilots.
- Perform AI and GenAI security risk assessments across identified uses and applications.
- Analyse AI governance for responsible AI use, including policies, roles and responsibilities.
- Evaluate prompt injection and data leakage risks, alongside model security and adversarial machine learning.
- Assess alignment with the European AI Act and related compliance obligations.
- Run interviews and workshops with IT, data and AI, business and DPO stakeholders.
- Document findings, develop an improvement plan and present recommendations to CISO and management.
Your profile
Essential skills
- Senior or expert experience in AI/GenAI security, with autonomous delivery on short assignments.
- Knowledge of AI risk governance, including NIST AI RMF and ISO/IEC 42001.
- Knowledge of European AI Act requirements and related compliance, including GDPR connections.
- Experience with assessment or audit methods for AI applications and shadow AI.
- Practical understanding of prompt injection, data leakage, model security and adversarial machine learning.
- Clear, concise reporting to management and the CISO, including under time pressure.
- Ability to provide authoritative advice under broad direction, consistent with SFIA level 5, Ensure, advise.
Preferred skills
- ISO/IEC 42001 Lead Auditor or Lead Implementer, AI governance certification, CISSP or CISM.
- Bilingual Dutch and French communication.
Languages
- Dutch, B2.
- French, B2.
- English, B2.
Education
- Master’s degree, or equivalent experience gained through extensive relevant work.
Working context
- Reports to the CISO and collaborates with IT services, data and AI teams, business stakeholders and the DPO.
- Work is organised through stakeholder interviews, workshops, risk assessment and documented analysis.
- The assignment closes with knowledge transfer to the CISO’s team.
What's next?
The people who do well here are the ones who saw themselves in this description. Not because they match every line, but because the mission felt right for them.
We are actively hiring for this position. Applications are reviewed by our team, and matching profiles receive a call to discuss the role in detail.
It takes under a minute to apply. Your email, your CV. That is all we need to start the conversation.