Manager AI & Application Security📣 Job Ad

About the Role

Bupa Arabia is seeking a Manager - AI & Application Security to join their team in Jeddah. This full-time position is responsible for overseeing and managing application and AI security across the enterprise's systems and AI-enabled solutions. The role requires 2-5 years of relevant experience in the field.

Security Governance and Standards

This position involves establishing and maintaining robust security frameworks for both traditional applications and AI-enabled solutions. Key responsibilities include:

• Establishing and maintaining the Application Security and AI Security programs.
• Defining security standards, control requirements, and governance processes for applications and AI-enabled solutions.
• Aligning application and AI security practices with cybersecurity, privacy, data protection, enterprise architecture, and risk management requirements.
• Maintaining secure development guidelines for traditional applications, APIs, cloud-native applications, and AI solutions.

Secure Design and Development Lifecycle Integration

The Manager will integrate security considerations throughout the software development lifecycle (SDLC) and ensure secure design principles are applied to all solutions. This includes:

• Conducting threat modeling for business applications, APIs, cloud applications, AI use cases, and AI-enabled workflows.
• Reviewing application and AI solution architectures to identify security design weaknesses, assessing authentication, authorization, session management, data flows, integration patterns, and trust boundaries.
• Identifying risks such as prompt injection, insecure AI integrations, model misuse, excessive agency, data leakage, and unauthorized access to sensitive information.
• Embedding application and AI security requirements across design, development, testing, release, and production deployment stages.
• Advising development teams on secure software engineering, secure coding, API security, secrets management, dependency management, and DevSecOps practices.
• Defining security gates before production deployment for applications and AI solutions.
• Promoting developer security awareness and practical secure coding practices.

Application Security Testing and Vulnerability Management

A core aspect of the role involves managing and coordinating security testing and vulnerability remediation efforts for applications and AI solutions. Responsibilities include:

• Managing and reviewing findings from SAST, DAST, API security testing, software composition analysis, container scanning, and manual security reviews.
• Prioritizing vulnerabilities based on severity, exploitability, exposure, business criticality, and data sensitivity.
• Coordinating remediation with development, infrastructure, application owners, and cybersecurity teams.
• Tracking closure of security findings and validating remediation before release or production go-live.

AI Security, Privacy, and Data Protection Risk Assessment

The role requires specialized focus on assessing and mitigating security, privacy, and data protection risks specific to AI technologies and implementations. This involves:

• Assessing AI use cases for cybersecurity, privacy, legal, regulatory, and data protection risks.
• Reviewing AI-related data flows, training data, input/output handling, access controls, logging, retention, and sensitive data exposure risks.
• Evaluating third-party AI services, internal AI platforms, APIs, plugins, and AI integrations with enterprise systems from a cybersecurity perspective.
• Defining controls for prompt injection, data leakage, model misuse, insecure outputs, unauthorized data access, and AI-assisted software vulnerabilities.

Advisory, Monitoring, and Continuous Improvement

Beyond direct management, the role includes providing expert guidance, monitoring the threat landscape, and driving continuous enhancement of security practices. Key aspects include:

• Monitoring emerging application security and AI security threats, vulnerabilities, attack techniques, and industry best practices.
• Providing expert advisory to development, infrastructure, cybersecurity, privacy, and business teams.
• Supporting secure adoption of AI technologies across the organization while enabling innovation safely.
• Reporting application and AI security posture, risks, remediation progress, and key metrics to management.
• Continuously improving tools, processes, standards, and security review practices.