Director - Security Architecture - AI Technologies

JOB SUMMARY 
The Security Architect for AI Technologies will be responsible for designing, implementing, and maintaining robust security architectures and security guardrails to protect our AI assets and data. This is a pivotal role in shaping our security strategies, addressing complex security challenges, and ensuring compliance with industry standards and regulations. The ideal candidate will possess extensive experience in security architecture with a strong focus on AI and Generative AI technologies. Along with a deep understanding machine learning models, neural networks, and data privacy issues, this role will leverage strong analytical and problem-solving skills with the ability to interpret complex data and articulate findings to diverse stakeholders.

CANDIDATE PROFILE
Required Education and Experience

• Bachelor’s degree in computer science, engineering or equivalent experience/certification.
• 8+ years of progressive information technology/information security engineering and/or security experience including:
  • 2+ years’ experience in the development, testing, and research of AI/ML systems.
  • 2+ years’ experience in machine learning models, neural networks, and managing data privacy concerns.
  • 2+ years’ experience with security tools and frameworks related to AI, such as secure ML pipelines and AI specific threat detection.
  • 2+ years’ experience with scalable MLOps practices for deploying, monitoring, and maintaining large-scale language models in production environments
• 2+ years as a team lead or direct management of resources (either employee or service provider)

Preferred:
•    Master’s degree in computer science, Software Engineering or related field or equivalent experience/certification.
•    Current information security certification: CISSP, CISM, CISA  
•    Certification in AI or ML such as CAIE or CAIS.
•    Familiarity with security standards and regulatory requirements related to AI and data protection.
•    Knowledge of AI/ML frameworks and platforms (e.g., TensorFlow, PyTorch, GPT models).
•    Comprehensive knowledge of risk management frameworks including FAIR, NIST RMF, MITRE TARA, and OCTAVE.
•    Demonstratable working knowledge of SAFe practices, principles, and roles.
•    Experience with JIRA and ServiceNow.
•    Technical leadership experience in a highly regulated environment.
•    Proficiency in formal methods and model-based systems engineering for AI/ML validation and verification.
•    Project management skills with a demonstrated ability to work independently and with others.

CORE WORK ACTIVITIES

Security Architecture AI Technologies
•    Security Architecture Design: Develop and implement comprehensive security architectures for AI and Generative AI systems, including secure data handling, access controls, and threat mitigation strategies.
•    Risk Assessment and Management: Conduct security reviews specific to AI technologies and Integration. Identify vulnerabilities and develop strategies to address potential threats to AI systems.
•    Defines strategy and roadmap, provides guidance, creates standards and guidelines, and reviews architectural designs. Ensures standards and guidelines incorporate legal and regulatory requirements. 
•    Design and enforce security policies and procedures tailored for AI and Generative AI applications. Ensure the secure deployment, operation, and maintenance of AI systems.
•    Develop and test incident response plans to address potential breaches or security events.
•    Provide subject matter expertise on frameworks and best practices for implementing trustworthy AI systems.
•    Work closely with cross functional teams, including data scientists, software engineers, and IT operations, to integrate security best practices into AI development and deployment processes.
•    Stay informed about the latest trends, vulnerabilities, and advancements in AI and Generative AI. Educate and train team members on security best practices and emerging threats. 
•    Evaluate and recommend improvements to existing security measures and tools. Implement new technologies and methodologies to enhance the security posture of AI systems.
•    Conduct assessments of threats and vulnerabilities, determine deviations from acceptable configurations or enterprise or local policy, assess the level of risk, and develop and/or recommend appropriate mitigation countermeasures.
•    Assess and prioritize security risks associated with applications and develop risk mitigation strategies.
•    Maintain effective communication with all stakeholders, providing regular updates on risk status, project progress, and compliance through concise reports and presentations.
•    Abilit