In this role, you will:

• Lead the design and implementation of secure architecture patterns for AI, machine learning, and generative AI systems, including data pipelines, model access, APIs, agents, retrieval-augmented generation, and AI-enabled applications.

• Define and maintain enterprise AI security reference architectures, technical standards, guardrails, reusable patterns, and architecture decision criteria.

• Lead architecture and design reviews for AI initiatives, ensuring security, privacy, resilience, and control requirements are incorporated early in the solution lifecycle.

• Perform AI-focused threat modeling across models, data flows, platforms, integrations, and user interactions, addressing risks such as data leakage, prompt injection, insecure model access, supply chain vulnerabilities, model misuse, and excessive agency.

• Translate identified risks into practical security requirements, mitigation strategies, compensating controls, and risk-based architecture decisions.

• Partner with engineering, product security, platform, cloud, application, and data teams to embed AI security controls into software development, DevSecOps, model development, deployment, and monitoring workflows.

• Develop validation criteria and repeatable assurance patterns for AI platforms, pipelines, models, third-party services, and emerging capabilities.

• Provide architecture oversight for generative AI tools, internal AI services, developer productivity solutions, and business-led AI use cases.

• Ensure AI security designs align with internal policies and applicable external standards and regulatory expectations, including NIST, ISO, and FFIEC concepts.

• Support risk, audit, compliance, and incident management activities through clear documentation of architecture decisions, control designs, residual risks, and remediation actions.

• Communicate technical risks, architecture options, and recommendations clearly to engineering teams, business stakeholders, governance forums, and senior leadership.

• Mentor architects and security practitioners, promote internal knowledge sharing, and continuously improve AI security architecture practices as technologies and threats evolve.

What we value

These skills will help you succeed in this role

Deep technical expertise in security architecture, secure design, application security, cloud security, product security, data protection, and modern engineering practices.

• Practical understanding of AI and machine learning architectures, generative AI, model and data pipelines, APIs, cloud-native platforms, and AI security risk patterns.

• Ability to translate complex technical and emerging risks into clear architecture requirements, control designs, implementation patterns, and executive decisions.

• Experience leading architecture reviews, threat modeling, technical risk assessments, and secure-by-design programs in complex enterprise environments.

• Strong collaboration and influencing skills across Security, Engineering, Technology, Data, Risk, Compliance, Audit, and business teams.

• Execution-focused leadership with sound judgment, strong problem-solving skills, and a commitment to measurable risk reduction.

• Curiosity, adaptability, and continuous learning in a rapidly evolving AI security landscape

Education & Preferred Qualifications

• Degree required: Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline; advanced degree preferred.

• Years of experience: 10+ years of progressive experience in cybersecurity, including significant experience in security architecture, application security, product security, cloud security, or security engineering.

• Certifications required or preferred: CISSP, CCSP, CSSLP, cloud security, architecture, or comparable industry certifications preferred.

• Knowledge of tools or technologies: Cloud-native architectures; AI and machine learning platforms; generative AI and large language model solutions; APIs; data pipelines; DevSecOps and CI/CD; threat modeling; security testing; identity and access management; data protection; logging, monitoring, and security automation.

• Additional language requirements: N/A.

• Other qualifications: Experience securing enterprise-scale platforms and applications, working in regulated environments, establishing reusable architecture standards, and communicating technical risk to engineering and senior leadership audiences.

Additional requirements

Additional requirements for this role include the ability to coordinate across global teams and time zones, support high-priority architecture, risk, audit, and incident activities as needed, and manage sensitive information in accordance with company requirements. Travel may be required based on business needs.

Work Requirement

Hybrid Work Requirement: Hybrid, subject to company and location-specific requirements.

• Shift Timings: Standard business hours with flexibility to support global stakeholders and critical security, architecture, or regulatory needs.