AI & ISMS Delivery Consultant

Role Purpose

The Senior Consultant AI & ISMS Delivery will support hands-on delivery of AI Governance and Information Security Management System (ISMS) initiatives.

The role focuses on following tasks, aligned with ISO 27001 and ISO 42001 frameworks under the guidance of the Lead Consultant.

• executing assessments,
• developing documentation,
• supporting audits, and
• implementing controls

Key Responsibilities

AI Governance & Responsible AI

1. Support AI governance implementation aligned with ISO/IEC 42001 and NIST AI RMF
2. Perform AI risk assessments covering bias, fairness, explainability, robustness, and privacy
3. Assist in AI use-case classification and risk scoring
4. Maintain AI registers, risk logs, and governance documentation
5. Support reviews of GenAI, analytics, and automated decision systems

ISMS Implementation & Cyber Governance

1. Execute ISO/IEC 27001 ISMS activities including:
2. Risk assessments and risk treatment plans
3. Control mapping and implementation support
4. Statement of Applicability (SoA)
5. Develop and maintain ISMS documentation such as policies, standards, procedures, and guidelines
6. Support internal audits, management reviews, and certification readiness activities
7. Assist with third-party, cloud, and technology risk assessments

Risk, Compliance & Reporting

1. Conduct technology and vendor risk assessments
2. Map controls to ISO 27001, ISO 42001, NIST CSF, and regulatory requirements
3. Prepare audit evidence and compliance artifacts
4. Support dashboards, metrics, and management reporting

Required Skills & Experience

1. 68 years of experience in Information Security, GRC, Technology Risk, or Cybersecurity
2. Hands-on experience with ISO 27001 ISMS implementation or support
3. Experience in risk assessments, control testing, and compliance documentation
4. Basic to intermediate exposure to AI governance, model risk, or data governance
5. Strong analytical, documentation, and stakeholder coordination skills

Preferred Certifications

ISO 27001 Lead Implementer or Lead Auditor, CISA / CRISC / CISM (any one preferred)

AI Governance, Data Privacy, or GRC-related certifications (added advantage)

Key Deliverables

ISMS risk assessment and treatment documentation

AI governance support artifacts and risk logs

Audit-ready evidence packs and compliance reports

Client-ready assessment and status reports