Role : Threat and Controls AI Consultant Specialist

Experience: 6-10years

Location: Hyd/Pune (Laptop Collection)

Job Description:

What you will be doing;

The Threat and Controls Assessment AI Specialist role will work as part of the global team to provide Consultancy and perform Threat Modelling on complex services and for early project engagements, with a primary focus on AI use cases.

This is a senior role reporting into the Head of Consultancy for Threats and Controls, closely collaborating with peers across Penetration Testing; Secure Development, Third Party Security Assessment and Cybersecurity business and regional leads, enabling effective end-to-end vulnerability identification.

Key Responsibilities:

- Perform expert level consultancy and threat and control assessments for core technologies such as GenAI, Agentic and Public Cloud (AWS, AZURE, GCP) architectures,
- Identify and assess AI-specific threats and control gaps in line with industry frameworks i.e. OWASP TOP10.
- Define and recommend AI security controls aligned to risk appetite.
- Liaise with Developers, Architects and other Technical Leads to understand the end-to-end service and identify where there are any control gaps
- Provide technical security advice and guidance via the Cybersecurity Consultancy service
- Work with the CSAT management team to enhance the Threats and Controls Assessment Service.
- Provide supervision, guidance and mentor less experienced members of the global team
- Act as a point of contact and source of advice on issues relating to Cybersecurity within the team

What you will bring to the role;





To be successful in this role you should have proven experience within the Technology sector with knowledge of the following skills:

Mindset

- Curiosity to explore how AI changes the threat landscape, and a pragmatic approach to balancing innovation with responsible risk management.
- Comfort working with ambiguity in fast moving AI technology, while still driving clear control outcomes and decisions.
- An inquisitive approach, always asking how to achieve goals in a smarter and more effective way
- An ability and interest to learn and experiment with new approaches to vulnerability management, in different contexts, across the amazing scale that HSBC brings.
- Stay up to date within the industry of new trends, and best practices

Valuable Risk and Controls understanding

- Experience assessing risk for GENAI and Agentic systems; including privacy, data governance, and model risk considerations (e.g., explainability, drift, misuse/abuse).
- Working knowledge of AI security threat frameworks and testing approaches. I.E. OWASP TOP10 for LLMs.
- Knowledge and exposure of Risk and Control Management
- Ability to understand and assess both threats, controls and vulnerabilities, articulating these to both technical and business stakeholders.
- Knowledge of different frameworks and methodologies including Threat Modelling using STRIDE and the MITRE ATT&CK; Framework.




- Desirable to have one or more industry-recognised cybersecurity-related certifications including CISSP, CRISC, CISM or Cloud Security Certifications

Strong Technical background

- Hands-on understanding of common GenAI solution components including RAG, Agentic frameworks and MCP servers/gateways.
- Expert level hands on knowledge in one or more of the main Cloud Service Providers Azure, AWS or GCP. Preferable to have real world experience in assessing AI security within the CSPs.
- Familiarity with AI security testing techniques such as prompt injections, jailbreak testing and poisoning.
- Proven experience in general security concepts and principles and application specific security concepts and principles.
- Proven experience working in a large scale, multi-national and technologically diverse environment
- Hands on experience with threat modelling and strong technical understanding and experience of assessing vulnerabilities and identifying weaknesses in diverse enterprise IT assets
- Strong understanding of Software Development Life Cycle (SDLC) with a focus on security
- Knowledge and experience with network, host and application security practices
- Understanding of emerging technologies and corresponding security threats

Strong stakeholder management and communications skills

- Experience of working in international and diverse environments
- Experience in engaging with business, technology, regional and regulator stakeholders
- Ability to communicate to executive leadership – effectively translating technical gaps into business risk
- Ability to prepare concise presentations and updates for senior management

📌 Threat and Controls AI Consultant Specialist (Telangana)
🏢 Purview Services
📍 Telangana