Corporate AI Security Architect

Description

The company is performance-driven, with people who enjoy hard technical problems and trust one another to act well. Working there can bring more job satisfaction, stronger pay and a good balance between work and life.

This Corporate AI Security Architect role sits in the Cyber Security Team and reports to the Chief Information Security Officer.

You will set the direction for security architecture and governance across the company's enterprise AI environment, covering approved in-house large language models and outside platforms such as Microsoft Copilot. You will be the main AI security expert in the organization, keeping AI use safe, compliant and consistent, so the business can adopt AI responsibly while protecting intellectual property, export-controlled data and critical business information.

Responsibilities

• Set the cyber security strategy, governance and technical direction for the enterprise AI program.
• Build and keep current the AI security policies, standards, controls and enforcement approaches.
• Advise leaders and teams on secure and compliant use of AI as the top AI security expert.
• Own the AI compliance framework, including what ITAR and EAR require.
• Set rules for allowed data inputs, output monitoring, geographic access, model access and audit trails.
• Assess AI platforms and vendors on security, data residency, training data handling, certifications and export control.
• Lead AI security certification work and design the architecture and documentation it needs.
• Run threat models and security architecture reviews before AI solutions reach production.
• Take part in investigating AI security incidents, such as prompt injection, unauthorized data access, model misuse and export control concerns.
• Define governance for controlled technical data, CUI, intellectual property, personnel data and business data used in AI.
• Create AI security awareness material and advise governance committees, leaders and staff.
• Track AI security metrics and report regularly to executives and oversight committees.
• Work with the CISO, operating groups, IT, Legal, Compliance and other teams to build AI security into business processes.
• Direct AI threat intelligence, vulnerability management and incident response.
• Lead enterprise AI risk assessments, covering model risk, prompt injection, data exposure and vendor weaknesses.
• Support decisions on AI tool selection, vendor approval and secure adoption.
• Watch emerging AI threats, technology, regulation and industry trends, and turn them into practical changes.
• Set and maintain the AI cyber security roadmap in line with enterprise priorities and business goals.

Requirements

• Typically a master's degree in IT, cyber security, computer science or a closely related discipline.
• 10+ years in cyber security architecture, with at least 2 years focused on AI/ML security.
• Proven knowledge of AI/ML, including LLMs, and the related security, governance and risk issues.
• Solid understanding of AI threats such as prompt injection, jailbreaking, data poisoning, model inversion and output exfiltration.
• Hands-on experience with ITAR and EAR as they apply to technical data, software and AI/ML systems.
• Background in building and certifying cloud environments under regulation, such as FedRAMP, CMMC Level 2 and/or DoD IL4/IL5.
• Working knowledge of NIST CSF, NIST 800-53, NIST AI RMF, ISO 27001 and similar frameworks.
• Experience building governance, monitoring and control frameworks in complex enterprises.
• Experience with DLP and information rights management in cloud and AI environments.
• Experience writing executive reports, metrics, dashboards and risk communications.
• Strong leadership, communication and influence skills, with the ability to explain complex technical topics to executives and non-technical audiences.
• Able to manage several complex priorities independently while staying accountable and keeping quality high.
• Track record as a senior technical leader and trusted adviser in a fast-changing technology area.
• Preferred: background in adversarial machine learning and AI red-teaming methods.
• Preferred: experience evaluating third-party AI vendors, AI supply chain risk and model security controls.
• Preferred: certifications such as CISSP, CISM, CRISC or AI/security-related certifications.

Conditions

Hybrid role based in Buffalo, NY, with 3 days a week in the East Aurora headquarters office.

You must live in the Buffalo, NY area or be willing to relocate there.

Salary range is $150,000.00 to $190,000.00 per year for this location, with actual pay based on factors such as location, experience and performance.

The range is the low and high end of the salary band for this position; total rewards may also include annual bonuses, an employee stock purchase plan, open paid time off and region-specific benefits.

The role requires access to data subject to U.S. government citizenship restrictions and to U.S. export-controlled information.

Unsolicited agency submissions are not accepted; agencies must be invited by the talent acquisition team and have signed terms in place first, otherwise resumes sent directly to employees will not qualify for a fee and become company property.

Benefits

• A strong compensation package, annual profit sharing, and a matching 401k.
• Access to the Employee Stock Purchase Plan, flexible spending accounts and health savings accounts.
• Flexible paid time off, holidays and a parental leave program.
• Medical, dental, vision, life and disability insurance, plus an Employee Assistance Plan and other supplemental cover.
• Tuition assistance, mentoring, coaching, leadership development and personal growth programs.
• Employee resource groups, cultural events and celebrations.