Our client handles sensitive and classified information, and its ICT is run to the ISM. Without clear rules, AI either stalls in caution or spreads without control. This role sets the rules, guardrails and assurance path that let the client move quickly and safely.

Minimum Baseline Clearance required

Responsibilities

Build the client's AI governance framework: policy, acceptable use, decision rights, and a process for approving and risk-assessing each use case.
Map AI use to the ISM and current ASD guidance, the PSPF, and the client's own information-handling obligations.
Set classification guardrails: which data can go into which AI service, at which level, with sensitivity labels, data loss prevention and permissions to match.
Fix oversharing in M365 before Copilot use widens, so AI does not surface what people should not see.
Review the AI platform and first priority use case with the architect: identity, logging, monitoring, data leakage and prompt-injection risks.
Define the assurance path for AI services, including IRAP assessment and authority-to-operate changes, and where a person must stay in the loop.
Coach the client's cyber and governance staff so they run the framework themselves

Key deliverables

AI governance framework and policy, approved by the client
Use-case intake and risk assessment process, applied to every priority use case
Data classification and guardrail standard for AI
Security review of the reference architecture and first priority use case
Assurance and accreditation plan for AI services
Handover and training for the client's cyber and governance team

Skills and experience
Essential:

10+ years in cyber security, information security or governance, with recent hands-on AI governance work
Deep working knowledge of the ISM and PSPF; has taken systems through IRAP assessment and authority to operate
Practical experience with Microsoft Purview (sensitivity labels, data loss prevention), Entra ID and Defender for Cloud
Understands generative AI risks: data leakage, oversharing, prompt injection and unreliable output
Writes policy executives will sign and engineers can follow

Desirable:

IRAP assessor background, or security roles in Defence, ASD or the national intelligence community
Defence Industry Security Program (DISP) and export-control awareness
AI management frameworks such as ISO/IEC 42001 or the NIST AI Risk Management Framework
Certifications such as CISSP or CISM

Why Work for Us?

Joining Akkodis means being part of a dynamic community of engineers that's at the forefront of tech innovation. You'll have the opportunity to work with cutting-edge technologies:

Whether your interests lie in systems engineering, software development, data platforms or any other tech discipline, we have a role that will suit you. You'll get to collaborate with talented expert colleagues from around the world who share your enthusiasm and passion for technology. We offer a flexible and supportive work environment, and we're committed to helping you grow and achieve your career goals. If you want to make a real difference, Akkodis is the place for you.

Akkodis is a commercial brand under which both AKKA and Modis entities operate.

"Akkodis is an Equal Opportunity employer, committed to all forms of workforce inclusion. We actively invite and encourage applications by candidates from diverse backgrounds".