AI Governance Specialist in  Banking Domain

Urgent requirement for AI Governance Specialist in Banking Domain is required for our banking clients in Kuwait

Deep knowledge of CBK regulatory expectations, data‑privacy law, and global frameworks (NIST AI RMF, ISO 42001, ISO 27001).-Must

Hands‑on experience evaluating AI/ML and GenAI systems for bias, privacy, security, and compliance risks.--Must

Microsoft stack: Purview, Entra ID, Defender, Azure AI Content Safety, Responsible AI dashboard.--Must

Open‑source stack: Open Policy Agent, Llama Guard, NeMo Guardrails, Guardrails AI, Garak, PyRIT.-Must

Implements identity management and role‑based access for AI models.--Must

Acts as a bridge between AI Factory and Risk, IT Security, Compliance, and Legal teams.--Must

Role Overview

The AI Governance Specialist ensures that AI systems are built and used safely within the bank. This role enforces Responsible AI standards, manages model risk, implements security controls, and ensures data privacy compliance. Every AI use case is mapped to CBK regulations and internal policies. The specialist leads the sign-off process and ongoing monitoring, enabling the bank to deploy AI with confidence. Collaboration with the Solutions Architect and ISPAD ensures governance controls are embedded into design.

Role Experience

Minimum 6+ years in model risk management or AI/data governance, preferably in banking or financial services.

Strong knowledge of CBK regulatory expectations, data-privacy law, and frameworks such as NIST AI RMF, ISO 42001, ISO 27001, and model-risk practices.

Hands-on experience assessing AI/ML and GenAI systems for security, bias, privacy, and compliance risks.

Microsoft Stack

Core Skills & Capabilities

Microsoft Purview (data governance, DLP, classification)

Microsoft Entra ID governance

Microsoft Defender

Azure AI Content Safety

Responsible AI dashboard

Open-source / Custom Stack

Open Policy Agent (governance and policy tooling)

Guardrail frameworks (Llama Guard, NeMo Guardrails, Guardrails AI)

Red-teaming toolkits (Garak, PyRIT)

Security, Access & Data Management

Implements and guides security requirements in AI models

Enforces identity management and role-based access to AI models

Conducts security and safety testing (prompt injection, data leakage, jailbreak, bias, hallucination) pre- and post-deployment

Establishes monitoring for drift and misuse

Ways of Working

Translates regulatory requirements into practical engineering controls for implementation.

Acts as the bridge between AI Factory and Risk, IT Security, Compliance, and Legal teams.

Maintains up-to-date knowledge of evolving AI regulations and integrates them into operational practice.

Skills: bank,governance,ai