Info Security Architect – AI

• Design, implement, and govern security frameworks and requirements for secure use of AI, including Generative AI and Agentic AI
• Enable secure AI technologies throughout the solution lifecycle, including model development, deployment, inference, and operational monitoring
• Serve as the primary subject matter expert on AI-specific security risks, threats, and controls across the enterprise
• Develop secure-by-design architecture guidelines for AI/ML platforms, including data ingestion, model training, model deployment, and inference layers
• Define security architectures and guardrails for Generative AI, Agentic AI, AI agents, tool use, orchestration frameworks, and enterprise AI integrations
• Lead AI-specific threat modeling and develop reusable security patterns for GenAI, RAG, and Agentic AI solutions
• Define reference security architectures, patterns, and guardrails that minimize manual review and approval friction
• Partner with engineering teams to automate and integrate security guardrails and controls
• Design risk-based AI security controls satisfying regulatory and enterprise requirements
• Identify and evaluate AI-specific threats, tools, and best practices
• Lead AI-specific risk assessments and security design reviews
• Work with red teams to validate model robustness against adversarial attacks
• Define and maintain AI security requirements, standards, and technical controls supporting the AI Policy and AIS Governance Program
• Partner with Data & AI Governance, Advanced Analytics, platform engineering, cloud security, and compliance teams
• Assess cybersecurity risks of third-party AI vendors, models, platforms, and services and recommend mitigating controls
• Define security logging, monitoring, detection, and response requirements for AI systems

• 10+ years in cybersecurity architecture or engineering roles
• Strong knowledge of modern AI/ML architectures, Generative AI, RAG, and Agentic AI architectures, pipelines, and tooling
• Experience with LLM security, prompt safety testing, adversarial AI risks, and AI security control design
• Experience securing enterprise AI platforms and cloud AI services, including Azure OpenAI, AWS Bedrock, Google Vertex AI, Databricks, or equivalent
• Experience applying AI security and governance frameworks such as NIST AI RMF and MITRE ATLAS
• Understanding of AI-based attacks and threats
• Strong knowledge of data protection and controls required to protect data
• Knowledge of creating and communicating cybersecurity risks to technical and non-technical audiences
• Experience working in AI/ML or data engineering environments
• Proven track record designing enterprise security frameworks or architecture patterns
• Excellent communication with technical and non-technical stakeholders
• Strong analytical, problem-solving, and decision-making abilities
• Leadership skills to guide engineering teams and influence organizational policy
• Knowledge of regulatory frameworks specific to insurance, including HIPAA and PCI
• Experience operating within complex enterprise environments with distributed platform, cloud, or infrastructure ownership

Demonstrates expertise in designing and implementing security frameworks for AI technologies, including Generative AI and Agentic AI, while ensuring compliance with regulatory standards. Proven ability to lead risk assessments, develop security architectures, and communicate effectively with diverse stakeholders.

• Cybersecurity Architecture
• AI Security Control Design
• Generative AI Security
• NIST AI RMF Framework
• Cloud AI Services Security

• AI/ML Architecture
• Adversarial AI Risk Assessment
• Data Protection Controls
• Security Framework Development
• Risk-Based Security Controls
• Security Logging and Monitoring
• Threat Modeling
• AI-Specific Security Patterns
• Model Robustness Validation
• AI Security Requirements Definition

• Analytical Problem-Solving
• Decision-Making
• Leadership
• Communication Skills

• AI Governance
• Cybersecurity Risks
• Regulatory Frameworks
• HIPAA Compliance
• PCI Compliance

• Azure OpenAI
• AWS Bedrock
• Google Vertex AI
• Databricks