AI2CYBER

Artificial Intelligence

• Develop and maintain ISO/IEC 27001 policies and processes, including risk assessments, risk treatment plans and Statements of Applicability.
• Assess control design and operating effectiveness, evaluate audit evidence and verify completion of corrective actions.
• Maintain risk registers, document exceptions and residual risks, and prepare recommendations for accountable risk owners.
• Support GDPR, NIS2 and EU AI Act gap assessments, mapping applicable requirements to controls and evidence with technical, privacy and legal specialists.
• Contribute to AI governance frameworks and ISO/IEC 42001 implementation, including AI inventories, risk and impact assessments, ownership, acceptable-use policies and approval processes.
• Work with engineering teams to define AI controls covering data quality and protection, access and agent permissions, human oversight, transparency, logging and change management.
• Review AI evaluation and security-test evidence before deployment and after material changes; coordinate reassessments and track actions from control gaps and incidents.
• Assess cloud and AI providers, including security assurances, data retention, customer-data use for model training and material service changes.
• Present significant risks, control weaknesses and overdue actions to management with clear recommendations and priorities.
• Support client engagements and AI2CYBER's cybersecurity products and services.

Explore GRC & AI Governance Consultant at AI2CYBER. Review requirements and application details.