Principal AI Security Architect

Description

The company offers wealth management, asset servicing, asset management and banking to individuals, families, corporations and institutions worldwide. It was founded in 1889, has more than 135 years of financial experience and employs over 24,000 people.

The company is building an AI security group to make AI adoption safe across the enterprise. This role helps define and put into practice the security architecture, governance patterns and technology guardrails for enterprise AI platforms, agentic systems, digital coworkers and emerging technology.

The work is hands-on. You will create architecture artifacts yourself and work directly with engineers. It is not a governance-only or people-management role. You will assess complex designs, solve difficult architecture problems and help build the security foundations for AI at scale, alongside engineering, enterprise architecture, identity, data, application security, infrastructure and risk teams.

In your first year, you will become a trusted technical adviser to engineering and architecture teams, produce architecture work that speeds up delivery, create reusable patterns that cut ad hoc review effort, lead complex discussions across cyber, technology and business teams, help set up the security base for enterprise AI, and turn single design decisions into repeatable guidance.

Responsibilities

• Act as lead security architect for AI, agentic AI, cloud, SaaS and emerging technology initiatives.
• Review and challenge solution designs to surface security requirements, architectural risks and areas to improve.
• Produce security architecture deliverables such as solution diagrams, data-flow and trust boundary diagrams, reference architectures, security patterns, design standards and control requirements.
• Run threat modeling and security design reviews for AI systems and the platforms they depend on.
• Turn security policies and control objectives into practical engineering requirements.
• Help define security patterns for AI agents and digital coworkers, AI platforms and orchestration frameworks, RAG architectures, MCP integrations, AI identities and delegated authorization, model access control and governance, and AI observability and monitoring.
• Speed up security reviews for delivery teams using reusable patterns and pre-approved architectures.
• Write practical implementation guidance for engineers building AI capabilities.
• Build and maintain a library of reusable AI security reference architectures, architecture decision records and security patterns.
• Write architecture standards and guardrails for enterprise AI adoption.
• Spot recurring design decisions and convert them into reusable reference material.
• Contribute to enterprise AI security strategy and architecture direction.
• Work closely with enterprise architecture, security engineering, identity and access management, application security, security operations, data protection, cloud engineering and emerging technology teams.
• Lead architecture workshops, design sessions and technical working groups.
• Shape security and technology decisions across several organizations.
• Research emerging AI technologies and security capabilities.
• Assess new platforms, architectures, frameworks and third-party solutions.
• Recommend options that weigh innovation, security, operational complexity and business value.

Requirements

• At least 8+ years of experience in security architecture, enterprise architecture, cloud architecture, engineering or a related discipline.
• Experience designing and reviewing complex enterprise technology solutions.
• Solid understanding of identity and access management, authentication and authorization, cloud security, application security, network security, API security, data protection, logging and monitoring, and secrets management.
• Experience with Microsoft Azure or a comparable cloud platform.
• Ability to produce architecture diagrams and technical design documentation.
• Experience running architecture reviews with several stakeholder groups.
• Excellent written and verbal communication skills.
• Preferred: experience with generative AI, LLM applications, AI agents or agentic AI architectures.
• Preferred: familiarity with RAG architectures, MCP, AI gateways, AI observability, model governance, agent identity and delegated authorization, prompt security and AI threat modeling.
• Preferred: experience developing enterprise standards, architecture patterns or reference architectures.
• Preferred: experience in a regulated financial services environment.
• Preferred: relevant cloud, security or architecture certifications.

Conditions

Base salary range: $137,400 - 233,600 USD. This range is a good-faith estimate of base pay.

Applicants must be authorized to work in the U.S. without employment-based visa sponsorship, now or in the future. The company will not sponsor U.S. work visa status for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa.

The company is committed to an inclusive workplace.

Benefits

• Retirement benefits, including a 401k and a pension.
• Health and welfare cover: medical, dental, vision, spending accounts and disability.
• Paid time off, parental leave and caregiver leave.
• Life and accident insurance, plus other voluntary and well-being benefits.
• Discretionary bonus program that may include an equity component.
• A flexible, collaborative culture where moving between roles is encouraged and senior leaders are accessible.
• Giving back is part of the culture, and employees worldwide volunteer their time for community causes.