Founding Member, Senior AI & Application Security Specialist (Delhi NCR - Hybrid)

Are you looking to join an organization that is growing and dynamic? What about a high-energy, collaborative environment that rewards hard work? J.S. Held is a global consulting firm that combines technical, scientific, financial, and strategic expertise to advise clients seeking to realize value and mitigate risk. Our professionals serve as trusted advisors to organizations facing high stakes matters demanding urgent attention, staunch integrity, proven experience, clear-cut analysis, and an understanding of both tangible and intangible assets. The firm provides a comprehensive suite of services, products, and data that enable clients to navigate complex, contentious, and often catastrophic situations. Role Summary Based in the Delhi NCR region in a hybrid work model, the Sr. AI & Application Security Specialist will be a founding member of J.S. Held’s AI & Application Security function, helping shape the strategy, standards, and security practices that enable the safe adoption of AI across the organization. This hands-on role focuses on securing AI-enabled applications, agents, RAG architectures, MCP/tool integrations, models, APIs, and cloud services. Working closely with the Senior Application Security Specialist, the successful candidate will help build and scale a modern AI security program while driving day-to-day AI security initiatives, risk management, and technical guardrails to ensure compliance with legal, regulatory, and organizational requirements. Role Details Role focus: approximately 70% AI Security and 30% Application Security Core Responsibilities Develop and maintain the enterprise AI Security Program. Establish AI security policies, standards, control frameworks, and security processes. Lead AI Security execution across standards, architecture principles, risk framework, inventory expectations, and business-aligned security requirements. Review AI solutions before deployment, including AI-enabled applications, agents, RAG pipelines, APIs, MCP/t