ai security governance & policy specialist

consultant/senior consultant | cyber defense & resilience |technology resilience| kuwait/ksa

ai security governance & policy specialist Jobs in Salmiya

ai specialist

consultant/senior consultant | cyber defense & resilience |technology resilience| kuwait/ksa Jobs in Salmiya

equipment specialist

erp training specialist

ai penetration testing specialist

International Turnkey Systems - ITS

<div>
 
 For a
 
 well-known Islamic Bank in Kuwait
 
 , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 
 
 Candidate is expected to have experience in assessing
 
 Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
 
 .
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 AI / LLM penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
 </li>
 <li>
 Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
 </li>
 <li>
 Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
 </li>
 <li>
 Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
 </li>
 </ul>
 
 
 Automation &amp; Tooling
 
 
 <ul>
 <li>
 Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
 </li>
 <li>
 Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
 </li>
 <li>
 Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
 </li>
 </ul>
 
 
 Secure code review &amp; AppSec
 
 
 <ul>
 <li>
 Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
 </li>
 <li>
 Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
 </li>
 </ul>
 
 
 Traditional PT
 
 
 <ul>
 <li>
 Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
 </li>
 <li>
 Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
 </li>
 </ul>
 
 
 
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
 </li>
 <li>
 3&ndash;7 years in penetration testing / application security / red teaming.
 </li>
 <li>
 Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
 </li>
 <li>
 Strong hands-on Python for security automation and test harness development.
 </li>
 <li>
 Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
 </li>
 <li>
 Strong report writing, clear communication, ability to work with developers on remediation.
 </li>
 </ul>
 
 
 A Must Certificates (at least one)
 
 
 <ul>
 <li>
 OffSec OSCP / OSCP+
 </li>
 <li>
 GIAC GPEN
 </li>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 ISC2 CCSP
 </li>
 </ul>
 
 
 Strongly Preferred
 
 
 <ul>
 <li>
 OffSec OSWE (advanced web exploitation / white-box testing)
 </li>
 <li>
 Burp Suite Certified Practitioner (BSCP)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
 </li>
 </ul>
 
 
 Tools &amp; Technologies Skills
 
 
 <ul>
 <li>
 Python, Git, CI/CD integration
 </li>
 <li>
 Burp Suite, common PT toolchains (Kali, scanners, API tooling)
 </li>
 <li>
 Azure security controls (identity, key management, logging/monitoring)
 </li>
 <li>
 AI red teaming tooling (e.g., PyRIT / Foundry scans)
 </li>
 </ul>
 
 
</div>

AI Penetration Testing Specialist

<div>
 
 
 For a well-known Islamic Bank in Kuwait
 
 , we are hiring an
 
 AI Security Governance &amp; Policy Specialist
 
 to build and operate security governance for LLM/ML/AI systems across the full lifecycle (use-case intake &rarr; design &rarr; build &rarr; test &rarr; deploy &rarr; monitor &rarr; retire).
 
 
 This position focuses on delivering tangible governance outputs: writing and maintaining enforceable policies and standards, translating frameworks into practical control requirements, performing AI security risk assessments, reviewing solution designs and technical evidence, and ensuring required testing and monitoring are implemented and evidenced.
 
 
 The role aligns AI governance and controls to recognized frameworks such as NIST AI RMF and ISO/IEC 42001, while ensuring consistency with existing enterprise security baselines (e.g., ISO/IEC 27001-style controls). The specialist partners with VMPT to ensure AI solutions undergo appropriate testing (including adversarial testing/red teaming), secure code practices, vulnerability management, and evidence-based exception handling where required.
 
 
 
 Key Responsibilities
 
 
 
 
 AI Policies, Standards, and Control Requirements
 
 
 <ul>
 <li>
 Draft, maintain, and publish AI security policies, standards, and minimum baselines for LLM/ML/AI solutions.
 </li>
 <li>
 Produce clear, testable requirements and guidance covering:
 </li>
 <li>
 Model onboarding and approval (internal and third-party models, versioning, provenance, licensing/usage constraints)
 </li>
 <li>
 Secure AI SDLC requirements (threat modeling, secure design, testing, change control, release gates)
 </li>
 <li>
 AI data governance requirements (data classification, retention, data minimization, leakage prevention, approved sources for RAG)
 </li>
 <li>
 Logging/telemetry requirements for AI apps and model endpoints (audit trails, redaction guidance, monitoring and alerting expectations)
 </li>
 <li>
 Maintain reusable governance artifacts and templates: intake forms, control checklists, evidence packs, exception/waiver forms, and sign-off criteria.
 </li>
 </ul>
 
 
 AI Risk Assessments and Control Validation
 
 
 <ul>
 <li>
 Perform hands-on AI security risk assessments for new and changed use cases, documenting:
 </li>
 <li>
 threat scenarios specific to AI and LLM integrations
 </li>
 <li>
 required controls and compensating controls
 </li>
 <li>
 residual risk and recommended risk treatment
 </li>
 <li>
 Apply NIST AI RMF concepts to structure AI risks in a practical way that engineering teams can implement and test.
 </li>
 <li>
 Maintain an AI security risk register with clear remediation actions, owners, dates, and closure evidence.
 </li>
 <li>
 Validate control implementation by reviewing technical evidence (architecture diagrams, IAM role assignments, secrets handling approach, logging configuration, test results, monitoring dashboards), and track remediation through closure.
 </li>
 </ul>
 
 
 Testing, Assurance, and Evidence Requirements
 
 
 <ul>
 <li>
 Define and enforce minimum assurance requirements for AI solutions, including:
 </li>
 <li>
 adversarial testing / AI red teaming minimum expectations (in coordination with VMPT)
 </li>
 <li>
 secure code review expectations for AI application layers (prompt handling, retrieval logic, output handling, tool invocation)
 </li>
 <li>
 pre-production and post-release monitoring requirements (abuse detection signals, data leakage indicators, model/API usage anomalies)
 </li>
 <li>
 Review and validate the evidence that testing and monitoring were performed and met required outcomes (reports, findings, retest results, operational telemetry).
 </li>
 <li>
 Ensure guidance remains aligned with industry references such as OWASP LLM Top 10, and translate that guidance into actionable requirements and developer-friendly mitigation checklists.
 </li>
 </ul>
 
 
 Cloud, Vendor, and Data Handling Governance
 
 
 <ul>
 <li>
 Maintain &ldquo;secure-by-default&rdquo; patterns for Azure-based GenAI deployments, including:
 </li>
 <li>
 identity and access controls (least privilege, service identities, key rotation expectations)
 </li>
 <li>
 network isolation and endpoint exposure controls
 </li>
 <li>
 secrets management and encryption requirements
 </li>
 <li>
 logging/telemetry baselines and retention requirements
 </li>
 <li>
 environment separation and deployment guardrails
 </li>
 <li>
 Define governance requirements for enterprise GenAI data handling (what data is permitted, what must be masked/redacted, what requires additional approvals, what must be logged).
 </li>
 <li>
 Support onboarding of third-party AI services and vendors by defining security questionnaires, minimum security clauses, required assurance evidence, and acceptable risk thresholds.
 </li>
 </ul>
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems, Risk/Compliance, or related discipline.
 </li>
 <li>
 5&ndash;10 years of experience in cybersecurity governance, risk management, compliance, security assurance, or security architecture with strong delivery orientation.
 </li>
 <li>
 Demonstrated ability to translate frameworks into practical, implementable controls, standards, and operating procedures that can be validated with evidence.
 </li>
 <li>
 Practical understanding of LLM/AI solution patterns (RAG, agents, embeddings, fine-tuning, model APIs, orchestration) and their security implications.
 </li>
 <li>
 Working knowledge of NIST AI RMF (govern/map/measure/manage concepts applied to AI risk).
 </li>
 <li>
 Familiarity with ISO/IEC 42001 concepts and mapping into enterprise ISMS environments.
 </li>
 <li>
 Working knowledge of ISO/IEC 27001-style control environments and audit expectations.
 </li>
 </ul>
 
 
 High Recommend Certificates
 
 
 <ul>
 <li>
 ISC2 CISSP
 </li>
 <li>
 ISACA CISM
 </li>
 <li>
 IAPP AIGP (Artificial Intelligence Governance Professional)
 </li>
 <li>
 ISO/IEC 27001 Lead Implementer (or Lead Auditor equivalent)
 </li>
 </ul>
 
 
 Preferred
 
 
 <ul>
 <li>
 ISC2 CCSP
 </li>
 <li>
 Microsoft Certified: Cybersecurity Architect Expert (SC-100)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102)
 </li>
 </ul>
 
 
</div>

AI Security Governance & Policy Specialist

Jazeera Airways

<div>Jazeera Airways is looking for an AI Specialist to ensure the continuous availability, performance, and security of the airline/airport network infrastructure that supports 24&times;7 mission-critical aviation operations. The IT Network Administrator will be responsible for maintaining a highly resilient, secure, and scalable network environment across airport terminals, airline offices, and operational facilities, enabling seamless passenger processing, flight operations, and coordination with airport stakeholders.

Responsibilities and Duties:
<ul>
<li>Assist in the development, testing, and deployment of AI and machine learning models used in airline operations and corporate systems</li>
<li>Support Python based AI services and internal APIs for prediction, classification, and automation use cases</li>
<li>Assist in data preparation activities including cleaning, validation, transformation, and feature generation from operational datasets</li>
<li>Support model training, evaluation, and basic performance monitoring under guidance from senior engineers</li>
<li>Assist in monitoring AI outputs and identifying data or prediction anomalies for escalation</li>
<li>Support deployment and operation of AI models in on‑premise or private environments</li>
<li>Assist with FastAPI based AI service development and integration with internal systems and dashboards</li>
<li>Support NLP and LLM based tools, including document analysis, summarization, and information retrieval use cases</li>
<li>Participate in testing activities including functional testing, model validation, and user acceptance support</li>
<li>Work with IT, Operations, Commercial, Finance, and other business teams to understand AI and data requirements</li>
<li>Assist in preparing and maintaining technical documentation for AI models, data pipelines, and system workflows</li>
<li>Follow internal IT governance, security, and data access policies applicable to airline systems</li>
<li>Support troubleshooting of AI related issues and escalate complex problems to senior team members</li>
<li>Maintain accurate documentation and support audit or compliance requirements related to AI systems</li></ul> 
 
Requirements and Qualifications:
<ul>
<li>Bachelor&rsquo;s Degree in Information Technology or Computer Science or Data Science or related fields.</li>
<li>1 to 2 years of experience in AI, machine learning, data engineering, software engineering, or related roles.</li>
<li>Strong proficiency in Python for data processing and AI development</li>
<li>Exposure to machine learning frameworks such as scikit learn, TensorFlow, and PyTorch</li>
<li>Understanding of core machine learning concepts including supervised learning, model evaluation, and feature engineering</li>
<li>Experience working with structured datasets (CSV, Excel, relational databases) and basic SQL querying</li>
<li>Familiarity with REST APIs and basic backend concepts. FastAPI exposure is an advantage</li>
<li>Awareness of model deployment concepts and production AI workflows</li>
<li>Familiarity with Git or other version control systems</li>
<li>Exposure to NLP, LLMs, or generative AI use cases is an advantage</li>
<li>Awareness of on-premise or private deployment environments and data security considerations</li>
<li>Strong analytical and problem solving skills with attention to detail</li>
<li>Good written and verbal communication skills and ability to document technical work clearly</li></ul></div>

AI Specialist

Weatherford

<div>Job Overview:
We are seeking an experienced Liner Hanger Repair and Maintenance Specialist to lead the inspection, testing, qualification, repair, and maintenance of a wide range of oilfield tools and equipment. This includes electronic, mechanical, pneumatic, and hydraulic systems. The role requires strong technical expertise, leadership capability, and a commitment to safety, quality, and operational excellence.
Responsibilities:
<ul><li>Lead complex troubleshooting, repair, and maintenance activities for liner hanger systems and related equipment
</li><li>Oversee workshop and electronic lab operations, including task allocation and procedural compliance
</li><li>Perform testing, calibration, and root cause analysis for equipment failures
</li><li>Execute preventive and corrective maintenance, including retrofits and upgrades
</li><li>Maintain accurate documentation, work orders, and compliance records
</li><li>Ensure adherence to HSE, quality standards, and operational procedures
</li><li>Drive continuous improvement initiatives within the workshop environment
</li></ul>Skills:
<ul><li>Expert knowledge of liner hanger systems
</li><li>Strong experience in a workshop environment
</li><li>Advanced mechanical, electrical, pneumatic, and hydraulic expertise
</li><li>Knowledge of NDT/NDE techniques and hazardous material handling
</li><li>Strong analytical thinking and complex problem-solving skills
</li><li>Leadership and team coordination capabilities
</li><li>High attention to quality, safety, and time management
</li><li>Basic computer literacy
</li></ul>Qualifications:
<ul><li>Bachelor&rsquo;s degree in Engineering (required)
</li><li>Minimum 4 years of experience in liner hanger systems
</li><li>Relevant experience in repair, maintenance, and testing of oilfield equipment
</li></ul>#LI-MD1</div>

Repair and Maintenance Specialist - Liner Hanger

Jana International Trading

Job Title: Detergent / Cosmetic Chemical Products SpecialistLocation: KuwaitJob Summary: We are seeking a knowledgeable and experienced Detergent / Cosmetic Chemical Products Specialist to join our team. The ideal candidate will have strong expertise in formulation, product development, and raw materials related to cleaning and personal care products.Key Responsibilities:<ul><li>Develop and improve formulations for detergent and cosmetic products</li><li>Evaluate and source raw materials, ensuring quality and cost efficiency</li><li>Ensure compliance with safety, regulatory, and quality standards</li><li>Conduct product testing, stability studies, and performance evaluations</li><li>Collaborate with production and sales teams for product optimization</li><li>Provide technical support and product training when required</li></ul>Requirements:<ul><li>Bachelor&rsquo;s degree in Chemistry, Chemical Engineering, or related field</li><li>Minimum [X] years of experience in detergent or cosmetic product development</li><li>Strong knowledge of surfactants, fragrances, preservatives, and additives</li><li>Familiarity with industry regulations and quality standards</li><li>Excellent problem-solving and analytical skills</li></ul>Preferred Qualifications:<ul><li>Experience in GCC market</li><li>Knowledge of local regulatory requirements</li><li>Ability to manage multiple projects efficiently</li></ul>Benefits:<ul><li>Competitive salary package</li><li>Career growth opportunities</li><li>Supportive and professional work environment</li></ul>Please share your CV to hrq@janapack.comJob Type: Full-timeWork Location: In person

Detergent / Cosmetic Chemical Products Specialist

C&D Talent Advisory - Academy

<div>
 
 About Formed
 
 
 
 
 Formed
 
 is a multidisciplinary digital studio operating across three core verticals:
 
 
 <ul>
 <li>
 Formed IT &mdash; Webflow development, no-code engineering, AI systems, and digital product architecture
 </li>
 <li>
 Formed Animation &mdash; Motion systems, 3D visualization, and high-impact brand storytelling
 </li>
 <li>
 Formed Academy &mdash; A technology-driven learning platform offering courses in UI/UX, no-code development, AI-driven content creation, and professional skills
 
 
 
 </li>
 </ul>
 As a
 
 Certified Webflow Partner Studio
 
 , Formed designs scalable digital ecosystems where innovation meets technology. Our mission is to empower brands and individuals through impactful digital experiences and education.
 
 
 <ul>
 <li>
 Location: Remote (Global)
 </li>
 <li>
 Type: Freelance | Performance-Based
 </li>
 <li>
 Compensation: Performance-based
 
 
 
 </li>
 </ul>
 
 How to Apply;
 
 Send your CV to
 
 can@formed.design
 
 
 
 
 About The Role
 
 
 
 We are looking for a
 
 Freelance Lead Generation Specialist
 
 who can identify and connect with potential clients for high-value digital services. This role is ideal for individuals who understand how to
 
 find, approach, and qualify prospects
 
 in a B2B environment.
 
 
 You will play a key role in building a strong sales pipeline by generating quality leads and initiating conversations with decision-makers across startups, scale-ups, and growing companies.
 
 
 
 Key Responsibilities
 
 
 
 <ul>
 <li>
 Identify and research companies that may need digital product, web development, or AI-driven solutions
 </li>
 <li>
 Generate and qualify leads through LinkedIn, email outreach, and other channels
 </li>
 <li>
 Build and maintain a consistent pipeline of high-quality prospects
 </li>
 <li>
 Initiate first contact and spark interest with relevant messaging
 </li>
 <li>
 Collaborate with the sales team to ensure smooth handover of qualified leads
 </li>
 <li>
 Continuously improve outreach strategies based on performance
 
 
 
 </li>
 </ul>
 
 What We're Looking For
 
 
 
 <ul>
 <li>
 Experience in lead generation, business development, or sales support
 </li>
 <li>
 Strong research and prospecting skills
 </li>
 <li>
 Ability to identify decision-makers and understand business needs
 </li>
 <li>
 Clear and persuasive written communication
 </li>
 <li>
 Self-motivated, organized, and results-driven mindset
 </li>
 <li>
 Familiarity with LinkedIn, email outreach tools, or CRM systems is a plus
 
 
 
 </li>
 </ul>
 
 Compensation
 
 
 
 <ul>
 <li>
 Commission-based structure
 </li>
 <li>
 Earnings based on closed deals
 </li>
 <li>
 High earning potential depending on lead quality and conversion
 
 
 
 </li>
 </ul>
 This role offers strong upside for individuals who can consistently generate
 
 high-quality opportunities
 
 .
 
 
 
 Why This Role Stands Out
 
 
 
 <ul>
 <li>
 Work remotely with full flexibility
 </li>
 <li>
 Contribute directly to revenue growth
 </li>
 <li>
 Opportunity to grow into Business Development or Sales roles
 </li>
 <li>
 Chance to join company as permanent employee
 </li>
 <li>
 Exposure to high-demand digital services and global clients
 
 
 
 </li>
 </ul>
 
 
 If you know how to find the right people and start meaningful conversations, this role offers a strong opportunity to turn that skill into real earnings...
 
 
</div>

Freelance Lead Generation Specialist | Commission-based

<div>Overview
The Field Specialist III &ndash; Wireline is responsible for executing wireline operations at the well site, supporting safe and efficient intervention, data acquisition, and well integrity activities. The role applies solid technical knowledge of wireline equipment and services to ensure high-quality service delivery and operational performance.
As a key member of the field team, the Field Specialist III &ndash; Wireline supports senior specialists, contributes to troubleshooting, and interfaces with the client while assisting in supervising field crews and ensuring compliance with company and industry standards.
Responsibilities
<ul><li>Execute wireline operations including rig-up, testing, and job execution for slickline and electric line services.
</li><li>Operate and maintain wireline units, pressure control equipment, logging tools, and intervention systems.
</li><li>Monitor job parameters and tool performance to ensure safe and efficient operations.
</li><li>Perform basic calculations related to depth control, tension, and well conditions.
</li><li>Troubleshoot operational issues and escalate complex technical problems when required.
</li><li>Ensure all job documentation, logs, and service reports are completed accurately and submitted on time.
</li><li>Maintain equipment, tools, and work areas in safe and operational condition.
</li><li>Support inventory management and ensure availability of wireline tools and consumables.
</li><li>Assist in equipment failure investigations and contribute to root cause analysis.
</li><li>Support and guide junior crew members while ensuring adherence to procedures and safety standards.
</li><li>Maintain effective communication with clients and wellsite teams to support service delivery.
</li><li>Participate in safety meetings, Job Hazard Analysis (JHA), and risk assessments.
</li><li>Ensure compliance with company HSE policies, well control requirements, and operational procedures.
</li><li>Be available on a 24-hour on-call basis to support wireline operations.
</li></ul>Skills
<ul><li>Good technical knowledge of wireline operations including slickline and electric line services.
</li><li>Understanding of pressure control equipment and well intervention techniques.
</li><li>Ability to operate and maintain wireline units and associated tools.
</li><li>Basic ability to interpret logging data and operational parameters.
</li><li>Problem-solving skills in field operations.
</li><li>Strong teamwork and communication skills.
</li><li>Ability to work in high-pressure field environments.
</li><li>Knowledge of mechanical and hydraulic systems.
</li></ul>Qualifications
<ul><li>High School Diploma or equivalent required.
</li><li>Technical certification or vocational training preferred.
</li><li>5-7 years of experience in oil and gas field operations with exposure to wireline services.
</li><li>Experience in slickline and/or electric line operations is required.
</li><li>Well control certification is an advantage.
</li><li>Willingness to travel extensively and work in rotational assignments (50&ndash;75%).</li></ul></div>

Field Specialist III - Wireline Services

Explore 85+ Ai penetration testing specialist in Salmiya this April. Find roles across top companies and apply now to boost your career.