cyber security architect

COZMALABS

<p>We are seeking a highly skilled and motivated Cyber Security Architect with strong system, on prem and Cloud Security expertise to oversee and enhance the organization&rsquo;s internal security architecture, controls, and policies while actively contributing to external security initiatives and projects.</p><p>This role combines strategic architecture leadership, hands-on implementation, security research, operations oversight, and cloud security engineering, with a strong focus on Microsoft environments such as Microsoft 365, Microsoft azure , and OS security.</p><p>The ideal candidate will possess deep expertise in enterprise security architecture, domain security, on-prem and hybrid infrastructure protection, cloud-native security controls, and DevSecOps integration.</p><p>Experience Requirements</p><ul><li>Minimum 7+ years in system and Cloud Security role.</li><li>Proven experience in enterprise security architecture (on-prem + cloud)</li><li>Experience in security research, security operations, and security assurance</li><li>Experience in setting and documenting security processes and procedures in compliance with Qatar NCSA guidelines and security best practices.</li><li>Experience in operating system and infrastructure hardening.</li></ul><p>Key Responsibilities</p><ul><li>Design, implement, and maintain enterprise-wide security architecture for the company internal security, user devices, cloud, and hybrid environments.</li><li>Develop and enforce security policies, standards, and procedures.</li><li>Lead security risk assessments and define mitigation strategies.</li><li>Align security controls with business objectives and regulatory requirements.</li><li>Oversee internal security governance and compliance frameworks (ISO 27001, NIST, CIS).</li><li>Architect and secure Azure cloud environments (IaaS, PaaS, SaaS).</li><li>Implement cloud-native and third-party security controls.</li><li>Conduct detailed security assessments of cloud services to ensure compliance with internal policies and industry frameworks.</li><li>Identify and remediate misconfigurations using automated scanning and manual inspection.</li><li>Implement secure cloud architecture patterns and service integrations.</li><li>Contribute to threat modeling and cloud risk assessments.</li><li>Ensure secure hybrid integration between on-prem and Azure environments.</li><li>Secure Active Directory and domain environments.</li><li>Implement GPO hardening and identity security controls.</li><li>Manage IAM, RBAC, MFA, and privileged access strategies.</li><li>Harden Windows/Linux servers and enterprise endpoints.</li><li>Oversee firewall configurations, IDS/IPS, VPN security, and segmentation.</li><li>Implement encryption and data protection strategies.</li><li>Perform vulnerability assessments and coordinate penetration testing.</li><li>Develop scripts and automation tools (PowerShell, Python, Bash) to enhance monitoring and compliance validation.</li><li>Integrate security controls within CI/CD pipelines (DevSecOps practices).</li><li>Monitor emerging threats, tools, and vulnerabilities.</li><li>Evaluate security technologies and recommend improvements.</li><li>Contribute to threat modeling exercises.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li><li>Conduct risk assessments and compliance audits.</li><li>Ensure adherence to CIS Benchmarks, NIST, ISO 27001.</li><li>Develop remediation guidance and contribute to policy development.</li><li>Participate in external security architecture and implementation projects.</li><li>Provide technical advisory for client-facing security initiatives.</li><li>Review third-party security integrations and solutions.</li><li>Support pre-sales security design when required.</li></ul><p>Required Technical Expertise</p><ul><li>Deep technical understanding and hands on of:</li></ul><p>Cloud &amp; Security Platforms</p><ul><li>Cloud security.</li><li>Data protection strategies</li><li>Zero Trust Architecture</li></ul><p>Infrastructure &amp; Systems Security</p><ul><li>Active Directory and Microsoft 365 hardening</li><li>User devices security</li><li>Domain security best practices</li><li>Endpoint security solutions</li><li>Hybrid identity solutions</li></ul><p>DevSecOps &amp; Automation</p><ul><li>CI/CD security integration</li><li>Secure coding awareness</li><li>Security automation scripting</li></ul><p>Certifications (Required / Strongly Preferred)</p><ul><li>CISSP &ndash; Certified Information Systems Security Professional</li><li>CCSP &ndash; Certified Cloud Security Professional</li><li>CISM &ndash; Certified Information Security Manager</li><li>Microsoft Azure Security Engineer Associate (AZ-500)</li><li>CompTIA Security+ (Foundational)</li></ul><p>Education</p><p>Bachelor&rsquo;s degree in Cyber Security, Computer Science, Information Systems, or related field (Master&rsquo;s preferred).</p><p>Work Location: In person</p>

Cybersecurity

<div><p><b>AI, Security Architect</b></p>
<p>
At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.</p>
<p>
Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.</p>
<p>
We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.</p>
<p><b>Overview</b></p>
<p>
BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.</p>
<p><b>
Primary Responsibilities</b></p>
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
<p><b>Required Qualifications</b></p>
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
<p><b>Preferred Qualifications</b></p>
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
<p>At BNY, our culture speaks for itself, check out the latest BNY news at:</p>
<p>
BNY Newsroom</p>
<p>
BNY LinkedIn</p>
<p> Here&rsquo;s a few of our recent awards:</p>
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul><br>
<p><br>
Our Benefits and Rewards:</p>
<p>
BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.</p><p><br>
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs.<br>
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</p></div>

AI Security Architect

Carnival Cruise Line

<div><p>The GCS - Security Architecture function is responsible for the development of technical security design specifications, integration specifications, standards, requirements, and implementation of appropriate technology architectures to mitigate risks to Carnival Corp and customer information assets. This position will work with all global brands as a project resource providing guidance and signing off on project implementations, firewall change requests and provide general guidance on Cybersecurity best practices.</p><p></p><p><b><br>
Essential Functions:</b></p><ul><li><p>
Work with brand IT teams and/or Business stakeholders on their projects to ensure that new systems and/or applications meet security best practices, published minimum security requirements, corporate standards, and policies.</p></li><li><p>
Provide security architecture and consulting services to business units and IT/OT-Maritime organizations.</p></li><li><p>
Research, test and implement security tools to scan, monitor and protect computing and networking environments.</p></li><li><p>
Document and transition security tools to security operations teams.</p></li><li><p>
Review network designs, applications data flows, system integrations and provide appropriate signoff</p></li><li><p>
Create high level network designs for GCS security tools and reference architectures documentation</p></li><li><p>
Review system design of existing applications/systems utilizing a common framework to identify potential vulnerabilities and gaps in the system, helping to mitigate cyber risks and protect sensitive data by proactively addressing potential threats before they can be exploited.</p></li><li><p>
Build, support and mature GCS security tools and architectural review process</p></li><li><p>
Develop hardening standards for networking and computing environments using industry best practices.</p></li></ul><p></p><p><b><br>
Knowledge, Skills &amp; Abilities:</b></p><ul><li><p>
Scope: Experience in Security Architecture, designing secure systems and architectures that can withstand cyber threats. Ability to communicate Cyber security architecture in non-technical terms to business stakeholders. Understanding of AI related Cybersecurity risks. Understanding of OT (Operational Technology) Cybersecurity risks.</p></li><li><p>
Problem solving: Creating, evaluating, and managing security architectures that align with business goals. Translating technical needs for stakeholders to resolve conflicts and gain agreement on solutions that align with Cybersecurity best practices and enterprise Standards and Policies.</p></li><li><p>
Impact: Contribute to technical designs that enforce secure, resilient, and compliant technology infrastructures that protect critical data.</p></li></ul><p></p><p><b><br>
Qualifications:</b></p><ul><li><p>
Bachelor's degree in Cyber Security (Master's degree a plus). Recognized industry Cybersecurity Certifications such as CISSP.</p></li><li><p>
Cloud environment (Azure, AWS, GCP) security and design. Application/Web/API/Container Security. Extensive knowledge of Windows, Linux, Network and Cloud Security and Cybersecurity best practices. Understanding of IAM and Least Privileged access models.</p></li><li><p>
5+ Cyber Security in Large Enterprise setting</p></li><li><p>
Solid understanding of Cybersecurity risks in architectural designs and recommending mitigating controls. Key experience should includes cloud security (Azure/AWS/GCP), identity and access management (IAM), network segmentation, encryption, threat modeling within Enterprise IT and OT environments. Strong communication and strategic leadership skills are vital for aligning security with business goals.</p></li></ul><p></p><p><br>
Travel: Less than 25% with shipboard travel likely</p><p>
Work Conditions: Work primarily in a climate-controlled environment with minimal safety/health hazard potential.</p><p>
Physical Demands: Must be able to remain in a stationary position at a desk and/or computer for extended periods of time.</p><p></p><p><br>
This position is classified as &ldquo;in-office.&rdquo; As an in-office role, it requires employees to work from a designated Carnival office in South Florida Monday through Thursday each week. Employees may work from their homes on Fridays. Candidates must be located in (or willing to relocate to) the Miami/Ft. Lauderdale area.</p><p>
Offers to selected candidates will be made on a fair and equitable basis, taking into account specific job-related skills and experience.</p><p></p><p><br>
At Carnival, your total rewards package is much more than your base salary. All non-sales roles participate in an annual cash bonus program, while sales roles have an incentive plan. Director and above roles may also be eligible to participate in Carnival&rsquo;s discretionary equity incentive plan. Plus, Carnival provides comprehensive and innovative benefits to meet your needs, including:</p><ul><li>
Health Benefits:<ul><li>
Cost-effective medical, dental and vision plans</li><li>
Employee Assistance Program and other mental health resources</li><li>
Additional programs include company paid term life insurance and disability coverage</li></ul></li><li>
Financial Benefits:<ul><li>
401(k) plan that includes a company match</li><li>
Employee Stock Purchase plan</li></ul></li><li>
Paid Time Off<ul><li>
Holidays &ndash; All full-time and part-time with benefits employees receive days off for 8 company-wide holidays, plus 2 additional floating holidays to be taken at the employee&rsquo;s discretion.</li><li>
Vacation Time &ndash; All full-time employees at the manager and below level start with 14 days/year; director and above level start with 19 days/year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 84 hours/year. All employees gain additional vacation time with further tenure.</li><li>
Sick Time &ndash; All full-time employees receive 80 hours of sick time each year. Part-time with benefits employees receive time off based on the number of hours they work, with a minimum of 60 hours each year.</li></ul></li><li>
Other Benefits<ul><li>
Complementary stand-by cruises, employee discounts on confirmed cruises, plus special rates for family and friends</li><li>
Personal and professional learning and development resources including tuition reimbursement</li><li>
On-site Fitness center at our Miami campus</li></ul></li></ul><p></p><p><br>
#Corp</p><p>
#LI-Hybrid</p><p>
#LI-SH1</p><div>
<div><div><div><div><p>About Us</p>
<p>Carnival Corporation &amp; plc is the world&rsquo;s largest leisure travel company, our mission to deliver unforgettable happiness to our guest through our diverse portfolio of leading cruise brands and island destinations, including Carnival Cruise Line, Holland America Line, Princess Cruises, and Seabourn in North America and Australia; P&amp;O Cruises and Cunard Line in the United Kingdom; AIDA in Germany; Costa Cruises in Southern Europe.</p><br>
<p><br>
Join us and embark on a career that offers not only the chance to grow professionally but also the opportunity to be part of a global community that makes a difference.</p>
<div></div><p>In addition to other duties/functions, this position requires full commitment and support for promoting ethical and compliant culture. More specifically, this position requires integrity, honesty, and respectful treatment of others, as well as a willingness to speak up when they see misconduct or have concerns.</p>
<div></div><p>Carnival Corporation &amp; plc and Carnival Cruise Line is an equal employment opportunity/affirmative action employer. In this regard, it does not discriminate against any qualified individual on the basis of sex, race, color, national origin, religion, sexual orientation, age, marital status, mental, physical or sensory disability, or any other classification protected by applicable local, state, federal, and/or international law.
</p><p></p><div>https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppac.pdf</div>
<p>https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/fmlaen.pdf</p></div></div></div></div></div></div><div></div>

Architect, Cybersecurity, GCS (Corporate)

Renesas

<div><b>Job Description</b><p></p><p><b><br>
About the role:</b></p><p>
This role is responsible for making our software secure by design and keeping it secure throughout its lifecycle &mdash; from architecture and development to deployment and operations. The Architect will define security standards, embed security into engineering workflows, and ensure our SaaS platform meets enterprise-grade security and compliance expectations.</p><p><b>
 A day in the life of our Cloud Security Architect:</b></p><ul><li>
Define and maintain secure architecture patterns for cloud-native SaaS systems</li><li>
Review and approve system designs for security risks</li><li>
Lead threat modeling for new features and platform components</li><li>
Design secure multi-tenant isolation models</li><li>
Architect secure API frameworks and integration patterns</li><li>
Ensure tenant data isolation and encryption strategies</li><li>
Continuously improve Secure SDLC practices</li><li>
Define secure coding standards and guardrails</li><li>
Architect secure cloud environments</li><li>
Define IAM, least-privilege access models, and service-to-service authentication</li><li>
Participate in security audits and customer security reviews</li><li>
Lead security incident root-cause analysis for application-layer incidents</li><li>
Improve detection and monitoring for application-level threats</li><li>
Collaborate with SRE to ensure security does not compromise reliability</li></ul><p><b>
Who We&rsquo;re Looking For:</b></p><ul><li>
8+ years in software engineering, security engineering, or cloud architecture</li><li>
Strong expertise in cloud-native architecture (microservices, containers, Kubernetes)</li><li>
Deep understanding of application security (OWASP Top 10, secure coding)</li><li>
Strong knowledge of IAM, authentication protocols (OAuth2, OIDC, SAML)</li><li>
Experience designing secure multi-tenant SaaS systems</li><li>
Hands-on experience with one major cloud provider (AWS preferred)</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Experience in enterprise SaaS environments</li><li>
Experience with regulated industries (FedRAMP, CMMC)</li><li>
Knowledge of tenant-based encryption models</li><li>
Experience implementing zero-trust architecture</li><li>
Background in vulnerability disclosure or bug bounty programs</li></ul><p><i>
The salary range for this role is $240,000 - $260,000. </i><i>Actual compensation packages within this range are based on a wide array of factors unique to each candidate and role requirements, including but not limited to skill set, years and depth of experience, certifications, and specific location.</i></p><b><br>
Additional Information</b><div></div><p><br>
Renesas is an embedded semiconductor solution provider driven by its Purpose &lsquo;<b>To Make Our Lives Easier</b>.&rsquo; As the industry&rsquo;s leading expert in embedded processing with unmatched quality and system-level know-how, we have evolved to provide scalable and comprehensive semiconductor solutions for automotive, industrial, infrastructure, and IoT industries based on the broadest product portfolio, including High Performance Computing, Embedded Processing, Analog &amp; Connectivity, and Power.<br>
<br>
With a diverse team of over 22,000 professionals in more than 30 countries, we continue to expand our boundaries to offer enhanced user experiences through digitalization and usher into a new era of innovation. We design and develop sustainable, power-efficient solutions today that help people and communities thrive tomorrow, &lsquo;<b>To Make Our Lives Easier</b>.&rsquo;<br>
<br>
At Renesas, you can:</p><ul><li><b>
Launch and advance your career </b>in technical and business roles across four Product Groups and various corporate functions. You will have the opportunities to explore our hardware and software capabilities and try new things.</li><li><b>
Make a real impact </b>by developing innovative products and solutions to meet our global customers' evolving needs and help make people&rsquo;s lives easier, safe and secure.</li><li><b>
Maximize your performance and wellbeing</b> in our flexible and inclusive work environment. Our people-first culture and global support system, including the remote work option and Employee Resource Groups, will help you excel from the first day.</li></ul><p>
Are you ready to own your success and make your mark?</p><p>
Join Renesas. <b>Shape Your Future with Us</b>.</p><p>
Renesas Electronics is an equal opportunity and affirmative action employer, committed to celebrating diversity and fostering a work environment free of discrimination on the basis of sex, race, religion, national origin, gender, gender identity, gender expression, age, sexual orientation, military status, veteran status, or any other basis protected by federal, state or local law. For more information, please read our Diversity &amp; Inclusion Statement.</p><p>
Renesas Electronics deals with dual-use technology that is subject to U.S. export controls regulations. Under these regulations it may be necessary for Renesas to obtain U.S. government export license prior to release of technology to certain persons. The decision whether or not to file or pursue an export license application is at the sole discretion of Renesas.</p><p>
We have adopted a hybrid model that gives employees the ability to work remotely two days a week while ensuring that we come together as a team in the office the rest of the time. The designated in-office days are Tuesday through Thursday for innovation, collaboration and continuous learning.</p></div>

Cloud Security Architect

Qatar National Bank

<div></div><div><div><ul><li><div><b>Business Unit</b>
</div><div>QNB - Qatar
</div></li><li><div><b>Division</b>
</div><div>Not Applicable
</div></li><li><div><b>Department</b>
</div><div>Not Applicable
</div></li><li><div><b>Location</b>
</div><div>Doha, Qatar
</div></li><li><div><b>Closing Date</b>
</div><div>31-Dec-2026
</div></li></ul></div><div><div><h5 class="jobSectionHeader"><b>About QNB</b></h5>
<p>Established in 1964 as the country&rsquo;s first Qatari-owned commercial bank, QNB Group has steadily grown to become the largest bank in the Middle East and Africa (MEA) region.</p>
<p>QNB Group&rsquo;s presence through its subsidiaries and associate companies extends to more than 31 countries across three continents providing a comprehensive range of advanced products and services. The total number of employees is more than 28,000 serving up to 20 million customers operating through 1,000 locations, with an ATM network of 4,300 machines.</p>
<p>QNB has maintained its position as one of the highest rated regional banks from leading credit rating agencies including Standard &amp; Poor&rsquo;s (A), Moody&rsquo;s (Aa3) and Fitch (A+). The Bank has also been the recipient of many awards from leading international specialised financial publications.</p>
<p>Based on the Group&rsquo;s consistent strong financial performance and its expanding international presence, QNB currently ranks as the most valuable bank brand in the Middle East and Africa, according to Brand Finance Magazine.</p>
<p>QNB Group has an active community support program and sponsors various social, educational and sporting events.</p>
</div></div><div><div><div><h5 class="jobSectionHeader"><b>Job Summary</b></h5>
</div><div><p>The incumbent will be responsible for the setup and management of the Cyber Security Strategy and Product management function in the Group Information Security (GIS) department. The incumbent will be a banking and finance technology thinker who constantly analyses the market for new technologies that would be best suited to support the Group&rsquo;s strategy</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Main Responsibilities</b></h5>
</div><div><p>A. Shareholder &amp; Financial: - Participate in the development, execution and maintenance of the IT Security strategy aligned to the overall corporate strategy, group long term goals and assist in the prioritization process. - Assist in the overall and annual IT Security business planning with the view of achieving the Group&rsquo;s short term goals and submit periodic reviews and resolution. - Provide inputs to the Technology Key Risk indicators (KRIs) which shall be applicable across the Group to manage Group&rsquo;s exposure to IT related risks effectively. Lead IT market research and provide applicable suggestions to further the Group&rsquo;s strategy and develop cost / benefit analysis to alternative technologies and processes. - Focal Point from GIS in the preparation of the GIS budget to support Group&rsquo;s long and short term goals. - Responsible for coordinating all aspects of the GIS budget process including: review of service area business plans and key performance indicators; annual capital budget and forecasts that include available and appropriate funding sources along with required project justification analysis; operating budget and forecast submissions that adhere to direction set by bank - Liaise with all Business Units Heads for preparing the yearly IT Business Plans, Prepare monthly and quarterly update on IT Business Plan. Monitor the Progress Status and raise issues / risks to GIS management. - Produce Availability Plans in line with QNB&rsquo;s business planning cycle; identifying Availability requirements early enough to take account of procurement lead times. - Create implement and report on Key Performance Indicators (KPIs) for performance monitoring purposes for the GIS group and monitor their achievement on a regular basis. - Produce Capacity Plans in line with QNB&rsquo;s business planning cycle; identifying Capacity requirements early enough to take account of procurement lead times. - Document the need for any increase or reduction in hardware resources based on service level requirements and cost constraints - Implements KPI&rsquo;s and best practices for Cyber Security Strategy and Product Management. - Promote cost consciousness and efficiency and enhance productivity, to minimise cost, avoid waste, and optimise benefits for the bank. - Act within the limits of the powers delegated to the incumbent and delegate authority to the respective staff and monitor exercise of the same. - Demonstrate clear understanding of the important factors behind the bank's financial &amp; non-financial performance.
</p><p>B. Customer (Internal &amp; External): - Build and maintain strong relationship with all other related departments, external entities and sections within GIS. - Defining &amp; implementing Service Level Agreements (SLAs) and Operation Level Agreements (OLAs) between GIS, IT Group, other Business Units and International Branches. - Monitors capital and operating budget performance of GIS to identify unfavourable budget variances and recommend mitigating actions or additional approvals required to minimize impact to yearend surplus/deficit. - Seek to continually exceed internal and external customer expectations through introduction of breakthrough IT Security technologies and processes aimed to improve the Group&rsquo;s products/services. - Produce regular management reports which include current usage of resources, trends and forecasts - Build and maintain a strong relationship with the Business Relationship Manager, technical teams within IT, finance team and external vendors of products and services - To assist customers in all their queries on Bank&rsquo;s product and seek solution to their requests. - Maintain activities in accordance with Service Level Agreements (SLAs) with internal departments/units to achieve improvements in turn-around time. - Build and maintain strong/effective relationships with related departments/units to achieve the Group&rsquo;s objectives</p><p>
C. Internal (Processes, Products, Regulatory): - Review and identify areas for improvement in the process to deliver effective &amp; efficient GIS projects and services - Act as a BCP Coordinator for GIS, coordinate implementation of DR setup as per the defined strategy - Assist in recruiting, motivating and developing personnel to ensure the function is staffed with individuals of the required caliber and that there is adequate succession planning and provision for future demands. - Analyse and recommend new products and solutions for GIS and business users to ensure that the group is up to-date with the latest trends in technology. - Support the new technology&rsquo;s development process, and ensure that project deliverables are met according to specifications and timeframes. - Compile and present relevant MIS to the Group CISO on a periodic basis for the existing systems and compare the existing functionalities vis-&agrave;-vis the efficiencies to be gained from proposed technologies. - Assist in the overall recruitment of the individual resources in the areas concerned - Continuous Improvement: - Set examples by leading improvement initiatives through cross-functional teams ensuring successes. - Identify and encourage people to adopt practices better than the industry standard. - Continuously encourage and recognise the importance of thinking out-of-the-box within the team. - Encourage, solicit and reward innovative ideas even in day-to-day issues.
</p><p>D. Learning &amp; Knowledge: - Possess good knowledge and experience in COBIT and ITIL framework. - Detailed understanding of IT systems and secure architecture designs. - Good understanding of suitable solutions for configuration management, service desk, software library etc. - Identify areas for professional development for self and direct reports and take necessary actions - Hold meetings with direct reports and assess their performance. - Attend specific conferences in areas of financial services technology breakthroughs and innovations to adapt suitable ones to the bank&rsquo;s security architecture and product portfolio. - Possess a superior knowledge of the GIS structure, its products and related risks together with a good knowledge of operations and related controls. - Identify areas for professional development of self and direct reports and act to enhance professional development of self and others - Proactively identify areas for professional development of self and undertake development activities. - Seek out opportunities to remain current with all developments in professional field. - Hold meetings with staff and assess their performance and your teams overall performance on a regular basis. - Take decisive action to ensure speedy resolution of unresolved grievances or conflicts within the team members. - Identify development opportunities and activities for staff and facilitate/coach them to improve their effectives and prepare them to assume greater responsibilities.
</p><p>E. Legal, Regulatory, and Risk Framework Responsibilities: - Comply with all applicable legal, regulatory and internal compliance requirements including, but not limited to, Group Compliance Policies and Procedures (AML &amp; CTF, Sanctions Policy, Data Protection Policy, Fraud Control Policy, Whistle Blowing Policy, Conflict of Interest and Insider Dealing Policy). - Understand and effectively perform your role under the Three Lines of Defence principle to identify measure, monitor, manage and report risks. - Ensure systematic good outcomes for clients in accordance with Conduct Risk policy. - Support the framework of RCSA, KRI, Incident reporting and remediation, as appropriate, in accordance with the Operational Risk Management requirements. - Maintain appropriate knowledge to ensure full qualification to undertake the role. - Complete all mandatory training provided by the Bank, attain, and maintain the required levels of competence. - Attend mandatory (internal and external) seminars as instructed by the Bank.
</p><p>F. Other: - Ensure high standards of data protection and confidentiality to safeguard commercially sensitive information. - Maintaining utmost confidentiality concerning customer and internal bank information obtained during the course of business and provide such information on a need to know basis only to Senior Management of QNB, Audit and Compliance functions, and relevant Regulators. - Maintain high professional standards to uphold QNB's reputation and to strengthen its market leadership position. - All other ad hoc duties/activities related to QNB that management might request from time to time. - Lead and develop the Cyber Security Strategy of the bank in line with the business strategy, regulatory requirement, best practices and ongoing cyber security challenges. - Benchmark and evaluate the performance of the technologies engineered and operated by the GIS Cyber Security Technologies &amp; Services teams to ensure that these are kept fine-tuned and updated with the latest technological developments.- Constantly scanning the market and competitors capabilities and bringing in technology proven in other markets and suggesting them across the group. - Keeping the CISO updated with latest developments in Cyber Security and raising any new cyber security risks to his attention. - Maintain the security architecture blueprints of the bank, liaising with the Enterprise IT architect and GITD Heads to develop and track the plans to achieve compliance. - Help to form the Information Security budget in collaboration with the Group Information Security Officer ensuring that systems under management are licensed and appropriately sized for the environment - Ensure that all the licenses and contracts are maintained and kept updated.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Education and Experience Requirements</b></h5>
</div><div><ul><li>Bachelor&rsquo;s/Master&rsquo;s Degree in Computer Science, Computer Engineering or any related subject.
</li><li>Experience in IT service management of systems Technical Design, Implementation, and Maintenance on wide variety of platform including the main banking platform.
</li><li>At least 15 year&rsquo;s experience in a major bank of which at least 5 years in bank in a managerial capacity in an IT Security engineering or architecture function.
</li></ul><p>- Training courses and certifications in application development, database administration, security, and management is a plus. Professional certifications, an ITIL foundation, TOGAF and COBIT is a must - Professional certification such as CISSP, CISM, CISA is preferred.</p>
</div></div><div><div><h5 class="jobSectionHeader"><b>Note: you will be required to attach the following:</b></h5>
</div><div><div><ul><li>Resume/CV</li></ul>
<ul><li>Copy of Passport or QID
</li></ul><ul><li>Copy of Education Certificate
</li></ul><ul><li>Copy of Birth Certificate</li></ul></div></div></div></div></div><div></div>

Senior Vice President Cyber Security Strategy and Product Management

American Recruiting & Consulting Group

<div><h2 class="jobSectionHeader"><b>AI Security Architect (LLM Security / Guardrails / Enterprise Architecture)</b></h2><p><b>
100% REMOTE!</b><br>
<b>W2 Contract Only | No C2C / No 1099 / No Third-Party Vendors</b><br>
<b>Must have permanent US work authorization or USA Citizenship (no sponsorship now or in the future)</b></p><p></p><h3 class="jobSectionHeader"><b>
SUMMARY STATEMENT</b></h3><p>
ARC Group is seeking an experienced <b>AI Security Architect</b> for a direct client in the healthcare insurance domain. This role is responsible for designing and implementing <b>enterprise AI security architecture</b>, with a strong focus on securing <b>locally hosted AI/LLM models</b>, defining and enforcing <b>AI guardrails</b>, and establishing <b>security standards, blueprints, and governance frameworks</b> across AI-driven platforms.</p><p>
This is a <b>true Architect-level role</b> requiring hands-on experience in <b>AI security design, threat modeling, and control implementation</b> across the full AI lifecycle.</p><p></p><h3 class="jobSectionHeader"><b>
ESSENTIAL RESPONSIBILITIES</b></h3><ul><li>
Design and implement <b>end-to-end AI security architecture</b> for locally hosted AI/LLM platforms.</li><li>
Define and enforce <b>AI guardrails</b>, including prompt injection prevention, input/output filtering, and response validation controls.</li><li>
Develop and maintain <b>enterprise security blueprints, architecture standards, and design patterns</b> for AI/ML platforms.</li><li>
Perform <b>AI threat modeling</b> and identify risks such as model misuse, adversarial inputs, and data leakage.</li><li>
Implement <b>security controls across the AI lifecycle</b>, including data ingestion, model training, inference, and output handling.</li><li>
Establish and monitor <b>security metrics and controls</b> to evaluate effectiveness of AI security architecture.</li><li>
Collaborate with engineering, data science, and infrastructure teams to ensure <b>secure AI platform design and deployment</b>.</li><li>
Participate in <b>architecture governance, design reviews, and technology evaluations</b>, including build vs. buy decisions.</li><li>
Evaluate and recommend <b>AI security tools, frameworks, and solutions</b> aligned to enterprise standards.</li><li>
Maintain <b>architecture documentation, security standards, and operational procedures</b>.</li><li>
Provide leadership on <b>emerging AI security threats, vulnerabilities, and industry trends</b>.</li></ul><p></p><h3 class="jobSectionHeader"><b>
REQUIRED EXPERIENCE</b></h3><ul><li><b>
10+ years</b> of overall cybersecurity experience with strong focus on architecture and design.</li><li><b>
2+ years of CURRENT hands-on experience in AI security architecture (MANDATORY)</b>.</li><li>
Proven experience securing <b>locally hosted / on-prem AI or LLM models</b>.</li><li>
Hands-on experience implementing <b>AI guardrails</b>, including:<ul><li>
Prompt injection prevention</li><li>
Input/output filtering</li><li>
Response validation and policy enforcement</li></ul></li><li>
Strong experience designing <b>end-to-end security architecture</b> for AI/ML platforms.</li><li>
Deep understanding of <b>AI/LLM threat landscape</b> (prompt injection, data leakage, model abuse).</li><li>
Experience with <b>enterprise security architecture frameworks and governance models</b>.</li><li>
Hands-on experience with <b>cloud security (AWS and/or Azure)</b>.</li><li>
Strong background in <b>Identity and Access Management (IAM), RBAC, and secure access controls</b>.</li></ul><p></p><h3 class="jobSectionHeader"><b>
REQUIRED CERTIFICATIONS</b></h3><ul><li><b>
CISSP (REQUIRED at time of submission)</b><ul><li>
Certification number must be included on resume</li><li>
Will be validated during background screening</li></ul></li></ul><p></p><h3 class="jobSectionHeader"><b>
PREFERRED QUALIFICATIONS</b></h3><ul><li>
Experience in healthcare or other <b>regulated environments (HIPAA, PHI protection)</b>.</li><li>
Experience working in <b>Agile / Scaled Agile environments</b>.</li><li>
Exposure to <b>AI governance frameworks, compliance, or risk management practices</b>.</li><li>
Experience with <b>enterprise security monitoring, metrics, and risk reporting</b>.</li></ul><p></p><h3 class="jobSectionHeader"><b>
ADDITIONAL REQUIREMENTS</b></h3><ul><li>
Must demonstrate <b>true architecture ownership</b> (not just implementation or support roles).</li><li>
Must have current, hands-on involvement in <b>AI security architecture initiatives</b>.</li><li>
Strong communication skills with ability to explain complex security architectures to technical and non-technical stakeholders.</li><li>
Must be <b>actively staying current</b> with rapidly evolving AI security technologies and threats.</li></ul>
-<p>
ARC Group is a Forbes-ranked top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We achieve this by understanding both our candidates&rsquo; and clients&rsquo; goals and serving both with integrity and a shared desire to succeed.</p><p>
At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status.</p><p><b>
Position offered with no fee to the candidate.</b></p><p>
</p><p>z3AXN0x92B</p></div>

JPMorganChase

<div><b>JOB DESCRIPTION</b><p><br>
Come on board with an iconic financial institution and take your career to the next level. You have found the perfect place to thrive, develop, and make a real difference.</p><p>
As a Senior Principal Cybersecurity Architect at JPMorganChase within the Cybersecurity and Technology Controls - Consumer &amp; Community Banking (CTC CCB) line of business, you provide deep cybersecurity expertise and work across teams to identify, create, and communicate risk, mitigation options, and solutions. Leverage your deep cross-domain expertise to bring together talent that will consistently create AI-enabled solutions, processes, and reusable proof-of-concept models for cybersecurity while remaining at the forefront of best practices for cybersecurity policy and technological advances.</p><div><p><b>
Job responsibilities</b></p><ul><li>
Advises and leads the cybersecurity strategy and development of multiple AI-enabled products, applications, and technologies across the CCB portfolio</li><li>
Translates highly complex technical issues, trends, and approaches to leadership to drive the firm&rsquo;s innovation and enable leaders to make strategic, well-informed decisions about target state architecture</li><li>
Drives the adoption and implementation of new technical methods in cybersecurity in line with the latest product development methodologies</li><li>
Creates durable, reusable cybersecurity frameworks that improve velocity and quality of output across teams and functions</li><li>
Develops architectures that have applicability across businesses and functions</li><li>
Champions the firm&rsquo;s culture of diversity, opportunity, inclusion, and respect</li></ul><p>
</p></div><p></p><div><p><b>Required qualifications, capabilities, and skills</b></p><ul><li>
10+ years of cybersecurity architecture experience</li><li>
Extensive experience in security assessment, threat modeling, and secure design for cloud-native applications, including Agent-to-Agent and application interactions</li><li>
Strong expertise in A2A (Agent-to-Agent) security, covering certificate management, API security, and service mesh architectures</li><li>
Proficient in working with cloud platforms such as AWS and container orchestration tools like Kubernetes</li><li>
Proficiency in MCP and its application on how it can be used to secure agentic systems</li><li>
Practical experience delivering cybersecurity architecture that can be applied and reused across businesses, functions, and systems</li><li>
Fluent in one or more programming languages or applications</li><li>
Demonstrated prior experience influencing across functions and teams to deliver modern cybersecurity architecture</li><li>
Experience applying expertise and new methods to determine solutions for new and complex cybersecurity problems across various disciplines</li><li>
Extensive practical cloud-native experience</li><li>
Ability to evaluate current and emerging technologies to recommend the best technology solutions or approach to achieve the future state cybersecurity architecture</li></ul><p>
</p><div><b>#CTC</b>
</div></div><b>ABOUT US</b><br>
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><p></p><div><p>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
</p><div><p>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.</p>
<p>JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans</p><br>
</div></div></div><br>
<br>
<b>ABOUT THE TEAM</b><br>
<br>
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

AI Sr. Principal Cybersecurity Architect

Search 3005+ Cyber security architect jobs near you this June. New roles added regularly across leading industries. Apply today.

3005 cyber security architect jobs Near Me

Cybersecurity

AI Security Architect

Architect, Cybersecurity, GCS (Corporate)

Cloud Security Architect

Senior Vice President Cyber Security Strategy and Product Management

AI Security Architect

AI Sr. Principal Cybersecurity Architect