it security architect

Goodyear

<div>IT Security Vulnerability and Patch Management Architect is a senior, high-visibility role within the Global IT Risk &amp; Security team, responsible for advancing and standardizing vulnerability management across a large, global IT and OT environment. The role acts as the product owner for the Rapid7 platform, driving strategy, architecture, optimization, and lifecycle management while supporting visibility and risk reduction across roughly 90,000 assets. This position partners closely with infrastructure, manufacturing IT, engineering, and plant-level teams to influence remediation outcomes, mature best practices, and address complex challenges such as legacy systems and uptime-critical environments. Blending deep technical expertise with leadership through influence, the architect serves as a trusted advisor, helps modernize reporting and processes, and enables the organization to measurably reduce enterprise security risk. 
Why This Role Matters
<ul><li>Reduces enterprise cyber risk at scale: Owns and advances vulnerability and patch management across a large global IT and OT footprint, directly improving risk visibility, prioritization, and remediation effectiveness.
</li><li>Drives transformation and consistency: Leads the maturation and standardization of vulnerability management practices, modernizing platforms, reporting, and processes to enable better operational and strategic decision-making.
</li><li>Influences outcomes across complex environments: Partners with infrastructure, manufacturing IT, engineering, and plant teams to overcome legacy system and uptime constraints, driving remediation progress without direct authority.
</li>Provides strategic technical leadership: Combines hands-on expertise with leadership through influence, serving as a trusted advisor, mentoring team members, and shaping long-term vulnerability management strategy. 
<li>
</li></ul>What You Will Do
<ul><li>Own and manage the Rapid7 vulnerability management platform, including strategy, configuration, lifecycle management, optimization, and vendor engagement.
</li><li>Drive the maturity and standardization of vulnerability and patch management practices across global IT and OT environments to reduce enterprise risk.
</li><li>Lead platform engineering and continuous improvement efforts, ensuring accurate data collection, analysis, reporting, and actionable insights.
</li><li>Partner with infrastructure, manufacturing IT, engineering, and plant-level teams to influence remediation outcomes in complex, uptime-critical environments.
</li><li>Monitor vulnerability risk trends, proactively engaging stakeholders to address rising risk and improve remediation effectiveness.
</li>Provide strategic leadership and enablement, including documentation, training, reporting modernization, and informal mentoring of team members. 
<li>
</li></ul>What We&rsquo;re Looking For
<ul><li>Bachelor&rsquo;s degree or equivalent experience in Information Systems, Computer Science, Engineering, Technology, Business Administration, or a related field.
</li><li>7+ years of professional experience in cybersecurity, vulnerability management, or related IT security disciplines.
</li><li>Hands-on experience administering and operating the Rapid7 platform (InsightVM/Nexpose or broader Rapid7 capabilities), including configuration and ongoing management.
</li><li>Experience working in complex enterprise environments, with exposure to manufacturing or operational technology (OT) systems and high-availability or legacy infrastructure.
</li></ul>#LI-MC2
Goodyear is one of the world's largest tire companies. It employs about 68,000 people and manufactures its products in 51 facilities in 19 countries around the world. Its two Innovation Centers in Akron, Ohio, and Colmar-Berg, Luxembourg, strive to develop state-of-the-art products and services that set the technology and performance standard for the industry. For more information about Goodyear and its products, go to Goodyear.com . 
 
If you need reasonable accommodation to complete the online application, or any other part of the employment process, please contact the Goodyear Candidate Care Line at 330.796.4500. 
 
Goodyear is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.</div>

IT Risk & Security Architect

Akima

<div>Company Overview: 
Work Where it Matters 
Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. 
At Suvi, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. 
For our shareholders, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. 
For our government customers, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers&rsquo; missions safely, securely, and efficiently. 
As a Suvi employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.
Description:
<div></div><div><div><div><div><div><div><div>
Suvi is seeking a dedicated Cyber Engineer III to support our TSA Enterprise Architecture team in Springfield, VA. To join our team of outstanding professionals, apply today! 
The ideal candidate will deliver outstanding customer service, strong technical expertise and a mission-driven work ethic. The Cyber Engineer III will provide specialized expertise in enterprise cybersecurity architecture and modernization initiatives under the EASS contract. Will report to the Lead Architect and Program Lead while directly supporting the Architecture &amp; Data Management Branch (ADMB). This role ensures that security architecture principles are fully integrated into all TSA modernization and transformational efforts. Will act as a forward-thinking change agent, modernizing TSA&rsquo;s approach to cybersecurity while enabling the secure infusion of disruptive technologies such as Intelligent Automation and Artificial Intelligence (IAAI), cloud, Zero Trust, biometrics, and next-generation screening capabilities. Will supports secure, scalable and resilient architectures that align with TSA&rsquo;s mission to protect the nation&rsquo;s transportation systems.
</div></div></div></div></div></div></div>Responsibilities:
<ul><li>Develop and maintain as-is and to-be security architectures across enterprise, portfolio and solution levels, including identity management, aviation system security, and layered defenses.</li><li>
Integrate enterprise security architecture domain principles with program-and project-level security assessments and modernization activities.</li><li>
Conduct gap analyses, impact analyses, risk assessments, and technical debt evaluations to support secure modernization and transformational efforts.</li><li>
Provide forward-thinking expertise on emerging technologies and special domains (e.g., Zero Trust, IoT, biometrics, mobile, cloud, AI/IAAI) and their associated security implications.</li><li>
Support the design and evaluation of security systems, policies, and technologies to mitigate cyber threats while aligning with TSA business objectives and risk appetite.</li><li>
Contribute to secure modernization roadmaps, including migration from monolithic applications to open and robust platforms.</li><li>
Collaborate with TSA functional areas to embed security into Analysis of Alternatives (AoAs), white papers, strategies, and next-generation planning activities.</li><li>
Participate in governance processes, FITARA reviews, and technology insertion evaluations with a security and modernization focus.</li><li>
Provide thought leadership on federal cybersecurity policy, NIST Cybersecurity Framework (CSF) 2.0, and layered security approaches for Transportation Screening Equipment (TSE) and other TSA domains.</li></ul>
Qualifications:
<ul><li>U.S. Citizenship.</li><li>
Active Secret security clearance.</li><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems or related field.</li><li>
8+ years of progressive experience in cybersecurity architecture, enterprise security, or IT modernization in federal or large-scale environments.</li><li>
Strong knowledge of federal cybersecurity policies, standards, and frameworks (NIST CSF, Zero Trust, FISMA).</li><li>
Demonstrated experience integrating security into enterprise architecture and modernization initiatives.</li><li>
Excellent analytical, communication and collaboration skills.</li></ul>
Preferred Skills:<ul><li>
Master's degree.</li><li>
Experience supporting TSA, DHS, or other federal transportation/security agencies.</li><li>
Hands-on knowledge of modern security technologies (Zero Trust, biometrics, cloud security, AI/ML security).</li><li>
Familiarity with FEAF v2.0, DoDAF, ServiceNow, and EA modeling tools (e.g., Ins-Pi/YouDesign).</li><li>
Certifications such as CISSP, CCSP, TOGAF, or Certified Enterprise Architect.</li><li>
Understanding of Transportation Screening Equipment (TSE) security and aviation system security domains.</li></ul>
Job ID: 2026-22535 Work Type: On-Site</div>

Cyber Architect III

Hussmann

<div>Overview:

We are seeking a highly experienced Cybersecurity Architect with 6+ years of expertise to lead the design, implementation, and oversight of cybersecurity initiatives across our business and manufacturing operations. This role demands deep technical expertise, strategic thinking, and the ability to influence cross-functional teams.
This role demands deep technical expertise, strategic thinking, and the ability to influence cross-functional teams. Experience in Operational Technology (OT) is a core requirement.
Responsibilities:
<ul><li>
Architect and implement enterprise-grade cybersecurity solutions across the IT and OT (manufacturing) environments</li><li>
Develop and maintain security architecture documentation and standards</li><li>
Evaluate and deploy security technologies (e.g., SIEM, EDR, firewalls, IAM, DLP, DSPM, Zero Trust)</li><li>
Ensure compliance with relevant frameworks and regulations (e.g., NIST, ISO 27001, CMMC, SOC2)</li><li>
Lead complex incident response and forensic investigations.</li><li>
Design and manage threat detection and prevention systems.</li><li>
Perform proactive threat hunting and risk assessments.</li><li>
Collaborate with internal teams to architect secure infrastructure.</li><li>
Develop and enforce security policies, standards, and guidelines.</li><li>
Vulnerability Management: Implement and manage vulnerability assessment tools and processes to ensure the security and compliance of IT systems</li><li>
Technical Leadership: Provide guidance and mentorship to junior IT staff, fostering a culture of continuous learning and improvement</li><li>
Project Management: Lead IT projects from inception to completion, ensuring timely delivery and adherence to budget and quality standards</li><li>
Stakeholder Collaboration: Work closely with business leaders, IT teams, and external vendors to ensure alignment and successful implementation of IT initiatives while embedding security into systems and workflows.</li></ul>
Qualifications:
<ul><li>
Experience: 6+ years of progressive experience in Cybersecurity roles</li><li>
Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related discipline</li><li>
Advanced certifications: CISSP, CISM, or OSCP are highly desirable.</li><li>
Manufacturing OT: Strong understanding of ICS/SCADA systems, PLC networks, and industrial protocols (e.g., Modbus, OPC UA, DNP3). Experience with network segmentation, firewalls, IDS/IPS, and zero trust architectures in OT environments.</li><li>
Vulnerability Management: Strong knowledge of vulnerability assessment tools and techniques</li><li>
Leadership: Proven ability to mentor team members</li><li>
Project Management: Strong project management skills with a track record of successful project delivery</li><li>
Communication: Excellent verbal and written communication skills as well as ability to present monthly metrics to senior leadership</li></ul> 
Competencies:<ul><li>
Business Acumen:<ul><li>
Project Leadership: Lead small cross-functional projects, requiring them to consider the impact on the entire enterprise.
</li><li>Financial Impact: Understand and review contract scope, corresponding cost and impact</li><li>
Business Value: Ability to define and identify the business value for IT projects/support changes with limited oversight.</li></ul></li><li>
Technical Acumen:<ul><li>
Enterprise-wide Technology Use: Able to analyze or design technical solutions and the impacts of the enterprise. Typically, is able to manage contract execution from beginning to end without leadership oversight.</li></ul></li><li>
Enterprise Thinking:<ul><li>
Alignment with Organizational Goals: Aligns their work and decisions with the broader organizational goals and strategies. Leads efforts to resolve significant problems and serves as primary contact at supervisory and leadership level.</li><li>
Decision Making: Able to interpret root-cause problems and propose relevant solutions. Broad understanding of issues and proactive recognition of patterns requiring deeper analysis within the function.</li><li>
Project Leadership: Able to lead mid-sized projects with guidance from leadership. Able to drive alignment between project decisions and customer needs.</li></ul></li><li>
Emotional Intelligence:<ul><li>
Demonstrated Emotional Intelligence: Accurately identifies, regulates and understands own emotions as well as the emotions of others, is able to manage conflict and bring solutions to the table.</li></ul></li></ul> 
**This St. Louis, MO-based position is eligible for a hybrid-remote work schedule (4 days/week in-office; 1 day/week remote) **<div> 
Benefits &amp; Perks &ndash; What&rsquo;s In It For You*</div><div>
Hussmann is committed to supporting your total wellbeing through a wide variety of benefits and wellness programs to support your physical, emotional, financial, social, and environmental health. Here&rsquo;s what you can expect:</div><div><ul><li>
Health Benefits &ndash; Offering medical, dental, vision, prescription plans, plus Health Savings Account and Flexible Spending Account options.</li></ul></div><div><ul><li>
Voluntary Benefits &ndash; Life, accident, critical illness, disability, legal, identity theft, and pet insurance.</li></ul></div><div><ul><li>
Hussmann Retirement Savings &amp; Investment Plan &ndash; 401(k) plan with company matching contributions and immediate vesting.</li></ul></div><div><ul><li>
Paid Time-Off Benefits &ndash; Paid time off, stewardship and parental leave.
</li></ul></div><div><ul><li>Educational Assistance &ndash; Tuition reimbursement for job-related courses after six months of service.</li></ul></div><div><ul><li>
Health Management and Wellbeing Programs &ndash;EAP, virtual health management, chronic condition, and tobacco cessation.</li></ul></div><div> 
</div><div><ul><li>Available to eligible employees starting the first day of the month following their start date. Eligibility for each benefit may vary based on employment status.</li></ul></div><div> 
</div><div>About Hussmann</div><div>
For over a century, Hussmann Corporation has been a global leader in commercial refrigeration equipment &mdash; delivering solutions that meet the demands of the modern food retailing industry. Headquartered in St. Louis, MO, Hussmann offers a diverse range of products and connected solutions designed to enhance operational efficiency, optimize visibility of merchandise, and keep food fresh. With a nationwide network of skilled technicians, Hussmann goes beyond manufacturing &mdash; a trusted partner, relentlessly driving customer success. For more information about Hussmann, please visit www.hussmann.com. 
</div><div>Hussmann is a subsidiary of Panasonic USA.
</div><div>Hussmann is proudly committed to creating an inclusive environment. All qualified applicants will receive consideration for employment without regard to veteran status, disability, age, race, color, religion, sex, national origin, genetics, medical condition, or any other characteristic protected by law.</div></div>

Cybersecurity Architect

Shaw Systems Associates

<div>Overview

The Information Security Architect is responsible for designing secure, compliant, and scalable architectures that enable the organization to safely adopt Microsoft 365 Copilot, large language models (LLMs), AI agents, and intelligent automation. This role blends deep expertise in Microsoft Purview, cloud security, responsible AI, and enterprise productivity tooling.

A core mandate includes implementing strong data ring‑fencing controls to ensure sensitive information remains within trusted network boundaries, while also driving measurable business value from Copilot in Microsoft 365 (M365) through secure enablement, workflow optimization, and governed adoption while limiting access to other AI resources from the company network not approved by the Information Security Office.

This individual will lead the company&rsquo;s M365 CoPilot Purview implementation setting many of the foundational pre-requisites required for a successful and secure AI ecosphere. 


Key Responsibilities

AI, LLM, Copilot, and Agent Security Architecture
<ul>
<li>Design secure architectures for LLMs, Microsoft 365 Copilot, generative AI systems, RAG pipelines, and autonomous AI agents.</li>
<li>Define guardrails for Copilot and AI agents, including identity boundaries, access controls, and operational constraints.</li>
<li>Establish governance for prompt security, model input/output filtering, and safe‑use patterns across the enterprise.</li>
<li>Architect secure integration patterns ensuring all AI systems operate strictly within approved network zones and data boundaries.</li>
</ul>
Data Ring‑Fencing &amp; Boundary Protection
<ul>
<li>Implement ring‑fencing strategies to prevent sensitive data from leaving the company&rsquo;s network or being accessed by unauthorized AI systems.</li>
<li>Design and enforce network segmentation, private endpoints, and isolation zones for AI workloads.</li>
<li>Ensure Copilot, LLMs, vector stores, and AI agents only access data through approved, monitored, and policy‑controlled channels.</li>
<li>Build automated controls that block data exfiltration, including DLP, egress filtering, and Purview‑driven policy enforcement.</li>
</ul>
Business Value Realization with Microsoft 365 Copilot
<ul>
<li>Lead secure enterprise adoption of Microsoft 365 Copilot, ensuring alignment with data governance and security policies.</li>
<li>Identify high‑value Copilot use cases that drive measurable productivity, efficiency, and decision‑making improvements.</li>
<li>Develop Copilot frameworks, usage patterns, and success metrics demonstrating</li>
<li>Ensure Copilot interactions respect sensitivity labels, retention policies, and Purview‑driven governance.</li>
</ul>
AI‑Driven Automation &amp; Enterprise Productivity
<ul>
<li>Architect secure AI agent frameworks that automate business processes, knowledge retrieval, and decision support.</li>
<li>Evaluate and implement AI‑powered copilots, workflow automation, and intelligent assistants across departments.</li>
<li>Develop standards for human‑in‑the‑loop oversight, escalation paths, and monitoring of autonomous agent behavior.</li>
</ul>
Microsoft Purview Strategy &amp; Data Governance
<ul>
<li>Lead the enterprise strategy for Microsoft Purview, ensuring data classification, lineage, and sensitivity labeling support AI and Copilot use cases.</li>
<li>Implement automated governance workflows that feed LLMs, Copilot, and AI agents only the data they are authorized to access.</li>
</ul>
Information Security &amp; Compliance
<ul>
<li>Define and enforce security baselines for AI workloads, including encryption, identity, network segmentation, and model access.</li>
<li>Ensure compliance with emerging AI regulations, including transparency, auditability, and model risk management requirements.</li>
<li>Conduct threat modeling for Copilot, LLMs, and AI agents, including prompt injection, data leakage, model manipulation, and supply‑chain risks.</li>
</ul>
Cross‑Functional Leadership
<ul>
<li>Serve as the enterprise SME for secure AI and Copilot adoption, guiding engineering, data science, legal, and compliance teams.</li>
<li>Translate complex AI security concepts into actionable guidance for business leaders and technical teams.</li>
<li>Lead architecture reviews for AI‑enabled applications, copilots, and agent‑based automation initiatives.</li>
</ul>
Monitoring, Observability &amp; Continuous Improvement
<ul>
<li>Implement monitoring for Copilot usage, LLM interactions, agent actions, and data access patterns.</li>
<li>Automate governance and compliance checks using Purview workflows, Azure Policy, and CI/CD pipelines.</li>
<li>Continuously evaluate emerging AI threats, model vulnerabilities, and best practices for responsible AI.</li>
</ul>
Required Qualifications
<ul>
<li>7+ years in information security, cloud architecture, or data governance.</li>
<li>2+ years of hands-on AI experience in an implementation and/or architecture role.</li>
<li>Strong experience and working knowledge of Microsoft Purview, Azure security services, and cloud governance frameworks with a proven track record of implementations.</li>
<li>Strong understanding of LLMs, generative AI, Retrieval-Augmented Generation (RAG) architectures, AI agent frameworks, and Microsoft 365 Copilot.</li>
<li>Proven experience driving business value through Microsoft 365 Copilot, including workflow optimization and measurable productivity gains.</li>
<li>Expertise in identity and access management, data protection, and secure cloud architecture.</li>
<li>Experience implementing ring‑fencing, network segmentation, and data‑boundary controls in Azure or AWS.</li>
<li>Excellent communication faculties, capable of demystifying complex technical paradigms to a varied audience, with both technical and non-technical stakeholders.</li>
</ul>
Preferred Qualifications
<ul>
<li>Certifications such as Azure Solutions Architect, Azure Security Engineer, CISSP, CCSP, or equivalent.</li>
<li>Experience with enterprise AI platforms, vector databases, and Machine Learning Operations (MLOps) pipelines.</li>
<li>Knowledge of AI observability, model risk management, and responsible AI frameworks.</li>
<li>Background in data architecture, automation engineering, or enterprise integration.</li>
</ul>
Core Competencies
<ul>
<li>Strategic thinker with the ability to influence across technical and non‑technical teams.</li>
<li>Strong communication skills with the ability to simplify complex AI and Copilot concepts.</li>
<li>Ability to work effectively with managers, technical leads, and technical staff to understand and deliver value added solutions.</li>
<li>Passion for secure, ethical, and innovative use of AI to transform business operations.</li></ul></div>

Information Security AI Architect

Career Maker

The primary responsibilities of the Service Design Architect &ndash; Information Security:Functional Responsibilities:<ul><li>Design and develop complex service design security solutions, ensuring they align with client requirements, business objectives, and industry best practices.</li><li>Collaborate with cross-functional teams to define and implement service design methodologies, frameworks, and standards.</li><li>Conduct in-depth analysis of client needs, business processes, and technical requirements to design innovative and efficient service solutions.</li><li>Conduct user research, interviews, surveys, and analyze data for the identification of opportunities that are capable of improving the services provided.</li><li>Contribute to maintaining quality standards for the services provided by MEEZA by following metrics and KPIs for measuring service performance, participating in audits and reviews, and implementing corrective actions to improve service quality.</li><li>Provide technical expertise and guidance with service design teams, ensuring the successful execution and delivery of service design projects.</li><li>Stay abreast of emerging technologies and industry trends, incorporating them into service design strategies to drive innovation and enhance service offerings.</li><li>Support the implementation of tools that allow for the effective monitoring/trending of IT infrastructure, software and IT components performance and resource utilization.</li><li>Establish and maintain comprehensive capacity management planning process at the enterprise, system, and IT component level.</li><li>Collaborate closely with peers in Security Operations and Compliance to ensure that security reviews regarding information security technologies provide feasible requirements and are consistent with contracts and regulations.</li></ul>Knowledge, Skills &amp; ExperienceAcademic &amp; Professional Qualifications:<ul><li>Bachelor&rsquo;s degree in computer science, Information Systems, Engineering, or Equivalent.</li></ul>Experience:<ul><li>5-6 years of experience in technology services or a similar field.</li></ul>Skills and Requirements:<ul><li>Expertise in service design principles, methodologies, and tools to lead the design and development of complex information security solutions.</li><li>Familiar with technologies like DLP, PAM, IAM, MDM, DNS security, FIM, deception solutions, NGFW, XDR, SIEM tools, SOAR tools, Email security, proxy, and WAF technologies.</li><li>Strong leadership and collaboration skills to effectively work with cross-functional teams, stakeholders, and clients, ensuring the successful execution of service design projects.</li><li>Proficient in conducting thorough analysis, translating client requirements into innovative and efficient service design architectures that align with business objectives and deliver exceptional user experiences.</li><li>Understanding of enterprise technologies including data centers (Tier-III), WAN/MAN/LAN networks, enterprise storage, server technologies, enterprise applications (e.g., ERP, BI, CRM, CMS etc.), security and enterprise management systems.</li><li>Understanding and application of Architecture Framework for service design, definitions, and documentation.</li><li>Strong knowledge of systems coding, security analysis, data Modeling and database management.</li></ul>Job Type: Full-timePay: QAR20,000.00 - QAR25,000.00 per monthWork Location: In person

Service Design Architect – Information Security

<div>AI, Security Architect

At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.
Overview

BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.

Primary Responsibilities
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
Required Qualifications
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

AI Security Architect

Search 10000+ It security architect jobs near you this April. New roles added regularly across leading industries. Apply today.

10000 it security architect jobs Near Me

IT Risk & Security Architect

Cyber Architect III

Cybersecurity Architect

Information Security AI Architect

Information Security AI Architect

Service Design Architect – Information Security

AI Security Architect