AI Security Specialist

Job Posting Organization:
CIMMYT is a cutting-edge, non-profit, international organization dedicated to solving tomorrow’s problems today. Established as a core CGIAR Research Center, CIMMYT focuses on improving the quantity, quality, and dependability of production systems for basic cereals such as maize, wheat, triticale, sorghum, and millets. The organization operates primarily in the Global South, fostering partnerships that enhance the livelihoods and resilience of millions of resource-poor farmers. CIMMYT is committed to creating a more productive, inclusive, and resilient agrifood system while working within planetary boundaries. The organization is part of a global research partnership aimed at reducing poverty, enhancing nutrition" style="border-bottom: 1px dotted #007bff !important;">food and nutrition security" style="border-bottom: 1px dotted #007bff !important;">security, and improving natural resources. For more information, visit https://www.cimmyt.org/

Job Overview:
The AI Security Specialist will play a crucial role in leading the establishment of rules governing the use of AI within CIMMYT's information systems. This position involves assessing AI tools and services prior to their adoption, ensuring that environments where researchers build and test AI are secure. The specialist will be part of a growing cybersecurity team that supports an international research organization operating across multiple countries. The role requires a hands-on approach to developing and maintaining standards for the secure and acceptable use of AI, as well as monitoring AI-specific threats and testing AI applications before their release.

Duties and Responsibilities:
The AI Security Specialist will be responsible for several key tasks, including: developing and maintaining CIMMYT's standards for the secure and acceptable use of AI; assessing AI tools, services, and supplier AI features for security and data protection risks prior to adoption; defining security and data protection requirements for enterprise AI assistants and agents; maintaining an inventory of AI tools and applications in use across the organization; setting and reviewing security baselines for research environments that build or test AI; monitoring AI-specific threats and testing AI applications before their release; defining AI security requirements for contracts and supplier assessments; leading the technical response to AI-related security incidents; and contributing to staff awareness on the safe use of AI.

Required Qualifications:
Candidates must possess a Bachelor's degree in computer science, information security, or a related field, with a Master's degree being an advantage. A minimum of 6 years of experience in information security is required, including at least 2 years focused on securing AI, machine-learning, or cloud data workloads. Hands-on experience in assessing AI tools or services for data handling and security risk is essential, as is the ability to work with non-technical stakeholders to establish and apply security rules. Additionally, candidates must hold at least one recognized security certification, such as CISSP, CCSP, or Microsoft AZ-50

• Preferred qualifications include an AI governance or AI security certification, such as ISACA AAISM, IAPP AIGP, or ISO/IEC 42001 Lead Implementer, which must be obtained within 12 months of appointment.

Educational Background:
The educational background required for this position includes a Bachelor's degree in computer science, information security, or a related field. A Master's degree is considered an advantage, indicating a higher level of expertise and knowledge in the relevant areas.

Experience:
The position requires a minimum of 6 years of experience in the field of information security, with at least 2 years specifically focused on securing AI, machine-learning, or cloud data workloads. This level of experience is crucial for understanding the complexities and challenges associated with AI security and ensuring that appropriate measures are in place to protect sensitive data and systems.

Languages:
A high level of proficiency in English is mandatory for this position, as the role involves working in an international context and communicating with diverse stakeholders. Advanced English skills are essential for effectively conveying security requirements and collaborating with team members. While not explicitly stated, proficiency in additional languages may be beneficial in a multicultural work environment.

Additional Notes:
CIMMYT offers an attractive remuneration package that includes support for continuous professional development. In addition to the provisions of Mexican Labor Law, the benefits package includes a year-end bonus equivalent to 40 days of salary, a vacation premium of 56%, life and medical insurance, supermarket coupons, a savings fund, and social benefits in accordance with Mexican regulations (IMSS, SAR / Infonavit). It is important to note that only short-listed candidates will be contacted for further consideration. Foreign national candidates must possess the legal documentation required to work in Mexico. The position will remain open until filled, indicating that applications will be reviewed on an ongoing basis.