Job Title: AI Native Product and Engineering
City: San Francisco
State/Province: California
Posting Start Date: 11/4/26
Job Description
We are building a modern Wipro-one where AI-native platforms and businesses become enduring engines of non-linear growth. We are creating a distinct AI-Native Business & Platforms unit-built around product management, engineering, and forward-deployed engineering-so we can modernize and scale what we already have, build new differentiating platforms, invest and partner where needed, and leverage Wipro's distribution strength to take platforms global.
Purpose: Build secure, scalable, AI-native platforms that can grow through consumption and support rapid field deployment.
͏
AI Native Product and Engineering
Governance
• Security policy management
• Cybersecurity strategy
• Security architecture - secure by design
• Security metrics and executive reporting
• Build cyber culture and awareness and training CybeReady Phishing: run monthly and quarterly reporting for 10 phishing templates provided by the vendor (Cybeready). Review and administer quarterly security phishing training which may require light contextual changes to templates. Wipro will not be responsible for maintaining the platform.
• Confirm ZeroFox program is running accurately for look-alike domains and report gaps to the IP team. Recommend any configuration changes as appropriate. Wipro is not responsible for running the platform.
• Review Holisticyber usage and monitor usage relative to license and provide commentary on risk associated with data. Provide support for customer compliance by filling out the holisticyber TPRM. If a prospective third party has not filed, vCISO will coordinate with the business partner and the third party for remediation. VCISO will also consult and advise on findings with the L4 team and provide recommendations to business partners and register on the risk register when required. These should be at a rate of ~10 a month maximum with only a portion requiring interaction. Additionally, vCISO may be required to provide TPRM responses to groups Client wishes to sell services to. In this instance vCISO would be responsible for approximately 1 per month. Wipro is not responsible for running the platform.
Risk Management
• Integrate cyber risk with enterprise-wide risk strategy
• Manage risk register
• Third party risk management
• Risk Remediation, acceptance, and tracking with use of IT-RIP form
• Risk communication
Compliance management
• Security and privacy legal and regulatory compliance
• Adherence to security standards
• Continuous control monitoring
• Audit and assurance
͏
Cyber Resilience
• Maintain cyber resilient applications and systems
• Business continuity and disaster R=recovery
• Crisis management
• Cyber resilience testing
Security Operations
• Information assets protection
• Security monitoring
• Incident detection and response
• Application security
• Vulnerability management
• Recommend Penetration Testing (Red Team/Blue Team, Network, Infrastructure, Web Application, API, and Code Review) for annual project/budget
• Review testing results and track findings on IT Risk Register and advice on remediation
• Threat management
• Identity management
• Incident response coordination with third party
Security Architecture
• Security architecture- secure by design
• Translate business requirements to technology solutions
• Technology evaluation and selection
• Technology design and implementation
• Technical risk assessments and architecture reviews
͏
͏
The expected compensation for this role ranges from $240,000.00 to $375,000.00.
Final compensation will depend on various factors, including your geographical location, minimum wage obligations, skills, and relevant experience. Based on the position, the role is also eligible for Wipro's standard benefits including a full range of medical and dental benefits options, disability insurance, paid time off (inclusive of sick leave), other paid and unpaid leave options.
Applicants are advised that employment in some roles may be conditioned on successful completion of a post-offer drug screening, subject to applicable state law.
