Security Architect- MD

Who We Are Looking For

The Managing Director, Security Architect is a senior leadership role responsible for defining and leading the firm's horizontal security architecture across AI Security, Data Protection, Cryptography, and Post-Quantum Cryptography (PQC). Reporting to the SVP, Data & AI Security, this leader ensures that architecture standards, controls, and secure-by-design patterns are coherent, consistent, and mutually reinforcing across all four disciplines.

The Managing Director, Security Architect is a senior leadership role responsible for defining and leading the firm's horizontal security architecture across AI Security, Data Protection, Cryptography, and Post-Quantum Cryptography (PQC). Reporting to the SVP, Data & AI Security, this leader ensures that architecture standards, controls, and secure-by-design patterns are coherent, consistent, and mutually reinforcing across all four disciplines.

This role exists to connect and elevate what would otherwise be siloed domains. The Managing Director will set a unifying architectural vision, establish shared standards and reference designs, and drive the enterprise toward a defensible, forward-looking security posture that spans data, models, keys, and cryptographic systems. The leader balances long-range strategy — including the firm's PQC transition — with the practical delivery of controls embedded into engineering workflows.

The successful candidate is a recognized architecture leader with deep, credible expertise across multiple security domains, the executive presence to influence senior technology and business leaders, and a proven ability to translate complex technical risk into actionable decisions. They will lead a team of domain architects and act as a force multiplier across the broader security and engineering organization.

• Define and steward a unified, enterprise-wide security architecture spanning AI Security, Data Protection, Cryptography, and PQC.
• Establish shared architecture standards, guardrails, and reference designs that remain consistent across domains while addressing domain-specific risk.
• Ensure architectural decisions in one discipline reinforce the others (e.g., data protection controls that account for cryptographic agility and AI data exposure).
• Set the multi-year architectural roadmap and align it with business priorities, regulatory expectations, and the firm's technology transformation.

• Lead the enterprise cryptographic architecture, including encryption, key management, secrets management, and machine identity.
• Own the firm's Post-Quantum Cryptography (PQC) strategy and transition roadmap, driving cryptographic agility and inventory (CBOM) across the environment.
• Establish standards for algorithm selection, key lifecycle, and crypto-agile design that support long-lived data protection.
• Partner with Infrastructure and Platform teams to modernize cryptographic hygiene and reduce operational risk.

• Set enterprise AI security architecture direction, including secure-by-default patterns for AI platforms, GenAI tooling, and AI agents.
• Ensure AI threat modeling and controls (prompt injection, model inversion, data poisoning, adversarial AI) are integrated with data protection and cryptographic standards.
• Guide the AI Security Architecture and Engineering teams to deliver coherent, defensible AI controls at scale.

• Define architecture patterns for data discovery, classification, DLP, access governance, and automated protection controls.
• Ensure data protection controls operate consistently across on-premises, cloud, SaaS, and AI environments.
• Align data-centric controls with cryptographic and AI security standards to protect sensitive data throughout its lifecycle.

• Integrate security architecture into Dev Sec Ops  pipelines through paved-road platforms, automation, and policy-as-code.
• Enable secure adoption of AI, data, and cryptographic capabilities with minimal friction for…