VP, AI Security Engineer, Technology Group

About GIC GIC is one of the world’s largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world’s industry leaders. As a leading global long-term investor, we work at the Point of Impact for Singapore’s financial future, and the communities we invest in worldwide.

Technology Group We experiment, design, and lead a 24×7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new and emerging technologies.

Strategy, Architecture, and Transformation Group The Strategy, Architecture & Transformation (SAT) group shapes and drives GIC’s technology strategy, ensuring alignment with business priorities and enterprise goals. Bringing together expertise in strategy, architecture, engineering, and transformation, the team strengthens governance, promotes consistency, and accelerates delivery across the Technology Group. Through modern practices and close collaboration, SAT leads the development of an architectural strategy that reinforces oversight and accountability while enabling reliable, scalable solutions and informed decision making across the Technology Group and, more broadly, across GIC.

AI Engineering The AI Engineering team within SAT is driving GIC’s transformation from AI-enabled to AI-native. We build and operate the foundational AI platform — gateway, agent runtime, agentic IAM, memory, observability, and more — so that every team across GIC can develop and deploy AI agents that are secure, observable, and production-grade.

What impact can you make in this role? Autonomous agents introduce a fundamentally different threat model: software that dynamically decides what to access, composes actions unpredictably, processes untrusted inputs, and operates at machine speed. Traditional security patterns assume human actors — you will design the security architecture for a world where they don’t.

As the AI Security Engineer, you will be the team’s subject-matter expert on both AI-specific and traditional security, responsible for the security posture of every service the AI Engineering team builds. You will design and drive the implementation of the agentic IAM layer — agent identity, composite identity (user + agent + tool), policy-driven authorisation, secret management, and blast-radius control — and embed security into every platform capability: the gateway, agent runtime, memory, and observability.

You will work closely with enterprise security teams — Cybersecurity Engineering, Cybersecurity Assurance & Defence, and IAM Engineering — to co-design the identity model, policy framework, and secret management patterns that make autonomous agents governable. Where enterprise solutions exist, you translate them into detailed design and implementation for the AI platform. Where they are still being built, you bridge the gap with interim frameworks and tooling so the team is never left unprotected.

You will partner with the AI Site Reliability Engineer to ensure the platform is both resilient and secure — inseparable concerns — and work with the core AI platform squad to make every service, SDK, and tool secure by design: threat models before architecture reviews, policy-as-code before deployment, and automated compliance checks before release.

You are not a security auditor reviewing after the fact. You are a hands-on security engineer who writes policy, builds identity frameworks, implements controls, and raises the security bar for the entire engineering squad — mentoring and equipping the team to do the same.

This is a platform security engineering role embedded within the AI Engineering team — not an enterprise cybersecurity function. Enterprise Cybersecurity Engineering owns the organisation-wide strategy, threat intelligence, and assurance standards; you engineer those standards into the AI platform.

Your Impact:

• Enable agentic IAM with enterprise IAM Engineering — architect the agent identity model (composite identity: user + agent + tool), session scoping, delegation chains, and identity propagation across the full call chain
• Implement policy-as-code — stand up the policy engine (Cedar / A…