The Cybersecurity Specialist is the management owner of security for AI systems: scope, patterns, verification and runtime execution. Role 1.1 Directs appetite. Role 1.4 files residual cyber risk. Role 2.2 runs serving. This role makes EST13 real and runs OPR05 so models, data, agents, non-human identities and serving paths are not an unscoped island beside the ISMS.

Standing duties

• Establish EST13: AI security scope, baselines, identity security baselines (including non-human identities, which Role 23.1 manages), model/registry/supply-chain hardening, and what is in or out of the ISMS.
• Execute OPR05: runtime integrity, endpoint and registry controls, detection tuned to AI failure modes — poisoning, prompt injection, model theft, agent tool-abuse, silent weight swap.
• Recommend at Implement to Role 15.1 (release gate): no high-risk go-live without security verification of the configuration Role 11.1 will baseline (no veto; ROLES13, t269).
• Raise ACT02 when a new tool, agent permission or external model would change the attack surface and purpose in fact. Raise ACT03 on security incidents that take residual risk outside appetite.
• Do not treat a scan report, a model card or an ISMS certificate as residual-risk acceptance or as AI Act conformity.

Accountable to: CISO / Head of Security Architecture (or GM: Security)

Primary domain: Establish EST13 (AI security scope) and Operate OPR05 (execute that scope). Does not Direct or accept residual risk.

Linked EN 18286 clauses: 4.3, 4.4.2, 5.1, 8.9.3, 9.3.1, 9.3.2, 9.3.3, 9.3.4, 9.3.5

Format: 3 hours of training, EUR 200.