Vice President, AI Product Security

Thomson Reuters is bringing AI into every layer of the products our customers rely on for answers across legal, tax, risk, and news. Security cannot be an afterthought in that expansion. As Vice President, AI Product Security, you will own the technical rigor behind how we build and the credibility to defend it in front of the customers who ask hard questions.

This role reports directly to the CISO and has two core mandates. First, embed security across the full AI stack we deliver including AI experiences, agents, agent harnesses, models, and context sources such as MCP. This requires shaping engineering decisions early by influencing and educating stakeholders on security requirements before code is written, rather than identifying issues during post-launch reviews. Second, represent that work externally by partnering with Customer Trust, Product, and Go-to-Market teams to explain, with technical credibility, how Thomson Reuters builds secure, fiduciary-grade AI.

Success will be measured by both the security of what we ship and the confidence customers have in it.

• Partner directly with product and engineering teams to embed security across the full AI stack — including AI experiences, agents, agent harnesses, underlying models, and context sources such as MCP — rather than treating the model in isolation
• Set the technical bar for AI-specific risk and cybersecurity requirements, holding engineering roadmaps to it before launch, not after
• Serve as the security authority engineering teams come to for architecture and control decisions, resolving trade-offs without stalling delivery
• Build the paved-road patterns and repeatable review frameworks that let engineering ship new AI experiences and agents fast, inside a risk tolerance you define with the CISO
• Equip Customer Trust, Product and Go-to-Market teams to sell with security as a differentiator, not a caveat — explaining, with technical credibility, how Thomson Reuters builds secure, fiduciary-grade AI solutions centered on trust
• Stand in front of customer executives and security leaders as the technical voice behind how Thomson Reuters secures its AI, and defend that posture under scrutiny
• Assist in the build-out of trust artifacts, sales enablement materials, and security processes that meet customer requirements
• Support customers directly in solutioning, adopting, and implementing AI in line with their own risk management strategies
• Facilitate a technical relationship with the AI security engineering and architecture team, as well as AI red-team to leverage security reviews and adversarial-testing capabilities to evaluate the risk of models as well as MCP-connected tools against emerging threat patterns such as tool-privilege escalation, prompt injection, etc.
• Set requirements for evaluating and monitoring third‑party and vendor‑supplied models and AI services — provenance, ongoing risk assessment, and contractual security terms — applying the same rigor used for systems built in‑house

• 12+ years in cybersecurity or product security, including senior leadership inside complex, SaaS‑based technology organizations
• Proven experience designing, developing, or securing AI solutions
• Business solution architecture experience: the ability to read a product's technical design and turn security risk into concrete engineering requirements
• A strong grasp of risk management, including how to identify and mitigate cybersecurity risk specific to AI models and capabilities
• Understand and be able to apply best practice frameworks such as MITRE Atlas, OWASP Top 10 for LLMs, NIST AI RMF and others
• Exceptional communication skills — able to translate deep technical concepts for non‑technical buyers, procurement, and business leaders without diluting the substance
• Comfort operating in ambiguity, building structure where none exists yet
• A track record of driving decisions through influence, not authority — engaging senior leaders across technical and product organizations

Please note, the Final date to receive applications is Friday, August 28th, 2026.

#LI-JU1

• Hybrid Work Model:
  We’ve adopted a flexible hybrid working environment for…