Principal AI Security Architect

Description

The company is a Nasdaq-listed provider of wealth management, asset servicing, asset management and banking services for individuals, families, corporations and institutions.

Founded in 1889, it works by three guiding principles: service, expertise and integrity. It has over 135 years of financial experience and more than 24,000 staff.

A new AI Security group is being set up to make AI adoption safe across the enterprise, covering AI platforms, agentic systems, digital coworkers and other emerging technology.

This is a hands-on architecture role, not a governance-only or management position. You will build the artifacts yourself, work directly with engineers, test complex designs and solve hard architecture problems.

Responsibilities

• Act as lead security architect for AI, agentic AI, cloud, SaaS and emerging technology projects.
• Review solution designs, pointing out security requirements, architectural risks and ways to improve them.
• Produce security architecture deliverables: solution diagrams, data-flow and trust boundary diagrams, reference architectures, security patterns, design standards and control requirements.
• Run threat models and security design reviews for AI systems and the platforms that support them.
• Turn security policies and control objectives into engineering requirements that teams can build.
• Define security patterns for AI agents, digital coworkers, AI platforms and orchestration frameworks, RAG, MCP integrations, AI identities and delegated authorization, model access control and governance, and AI observability and monitoring.
• Speed up security reviews for delivery teams with reusable patterns and pre-approved architectures.
• Write practical implementation guidance for engineers building AI capabilities.
• Build and maintain a library of reusable AI security reference architectures, architecture decision records and security patterns.
• Write architecture standards and guardrails for enterprise AI adoption.
• Turn recurring design decisions into reusable reference material.
• Help shape enterprise AI security strategy and architecture direction.
• Work with enterprise architecture, security engineering, identity and access management, application security, security operations, data protection, cloud engineering and emerging technology teams.
• Lead architecture workshops, design sessions and technical working groups.
• Shape security and technology decisions across several organizations.
• Track emerging AI technologies and security capabilities.
• Assess new platforms, architectures, frameworks and third-party products, and recommend options that balance innovation, security, operational complexity and business value.

Requirements

• Have 8+ years in security architecture, enterprise architecture, cloud architecture, engineering or a related field.
• Have designed and reviewed complex enterprise technology solutions.
• Understand identity and access management, authentication and authorization, cloud security, application security, network security, API security, data protection, logging and monitoring, and secrets management.
• Have worked with Microsoft Azure or a comparable cloud platform.
• Can produce architecture diagrams and technical design documentation.
• Have run architecture reviews with multiple stakeholder groups.
• Communicate clearly in writing and in speech.
• Preferred: Work with generative AI, LLM applications, AI agents or agentic AI architectures.
• Preferred: Familiarity with RAG, MCP, AI gateways, AI observability, model governance, agent identity and delegated authorization, and prompt security and AI threat modeling.
• Preferred: Experience writing enterprise standards, architecture patterns or reference architectures.
• Preferred: Experience in a regulated financial services environment.
• Preferred: Relevant cloud, security or architecture certifications.

Conditions

Base pay range is $130,530 to $221,920 USD, a good faith estimate of base pay.

Flexible, collaborative culture where moving between roles is encouraged and senior leaders are accessible.

You must be authorized to work in the U.S. without employment-based visa sponsorship, now or in the future. The company will not sponsor U.S. work visas for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa.

The company is committed to an inclusive workplace.

Benefits

• Retirement benefits, including a 401k and a pension.
• Health and welfare benefits: medical, dental, vision, spending accounts and disability cover.
• Paid time off, parental and caregiver leave, life and accident insurance, and other voluntary and well-being benefits.
• Discretionary bonus program that may include an equity component.
• Support for volunteering: employees worldwide give their time and skills to their communities.