AI Security Architect

Job Title: AI Security Architect
Job ID: 90337
Location: Downtown Toronto, Ontario - Hybrid


Overview:
Our client provides specialist financial services to alternative investment funds, investors, multinationals and private clients worldwide. With over 10,000 employees in 45 countries, they innovative solutions to meet clients' evolving needs and deliver exceptional service.  Armed with superior services, smart people, and strong technology, they tackle customers' complicated challenges by developing sophisticated solutions driven directly by demand. The result? Innovation that generates tangible value and makes a real difference for clients and their companies. This position calls for an AI Security Architect with extensive experience in enterprise security architecture, artificial intelligence (AI), and secure solution design. As a key member of the IT Security organization, the AI Security Architect is responsible for establishing the security architecture, governance, and technical standards required to enable the secure adoption of Artificial Intelligence (AI), Generative AI (GenAI), Machine Learning (ML), and intelligent automation technologies across the enterprise.
The AI Security Architect serves as the subject matter expert for AI security, ensuring AI-enabled solutions are designed, implemented, and operated in accordance with corporate security policies, regulatory obligations, and risk management framework. This role partners with Enterprise Architecture, Data & AI teams, Application Development, Cloud Services, Risk, Legal, Compliance, and Security Operations to embed security, privacy, and responsible AI principles throughout the AI solution lifecycle.


What you will be doing:

• You will develop and maintain the enterprise AI security strategy, architecture, and roadmap to support the secure adoption of AI technologies across the organization.
• Define security architecture principles, standards, and reference architectures for Artificial Intelligence, Generative AI, Machine Learning, and intelligent automation solutions.
• Establish secure design patterns for AI applications, model lifecycle management, data pipelines, AI infrastructure, APIs, and third-party AI services.
• Review AI initiatives and solution designs to ensure security, privacy, governance, and regulatory requirements are incorporated throughout the development lifecycle.
• Identify and assess AI-specific security risks, including prompt injection, model poisoning, adversarial attacks, insecure model supply chains, excessive agent permissions, sensitive data exposure, and unauthorized model access.
• Develop security requirements and control frameworks for AI platforms, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG) solutions, AI agents, and enterprise AI services.
• Collaborate with Enterprise Architecture, Data & AI, Cloud Engineering, Application Development, Legal, Compliance, and Risk teams to ensure AI solutions align with enterprise security and governance standards.
• Provide architectural guidance for AI infrastructure, identity integration, access controls, encryption, data protection, monitoring, and security logging.
• Evaluate emerging AI technologies, security capabilities, and industry best practices to support secure innovation and strategic technology adoption.
• Participate in architecture review boards, providing technical oversight and approval for AI-related technology initiatives.
• Support vendor risk assessments and security evaluations for AI platforms, AI-enabled software, and external AI service providers.
• Assist Security Operations and Incident Response teams during AI-related security incidents by providing architectural expertise and recommendations for containment and remediation.
• Develop and maintain enterprise standards for AI governance, secure AI development, model security, and responsible AI implementation.
• Promote security awareness by educating technology teams on secure AI design principles, AI risk management, and emerging AI threats.
• Stay current with advances in AI, cybersecurity, privacy regulations, and industry standards to continuously improve AI security capabilities.

• You must have 8+ years of experience in information security, security architecture, cloud security, application security, or enterprise architecture, including experience supporting AI or advanced analytics initiatives.
• Demonstrated experience designing secure enterprise architectures across cloud, application, identity, data, and infrastructure security domains.
• Strong understanding of Artificial Intelligence, Generative AI, Machine Learning, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI agents, and modern AI development practices.
• Experience identifying and mitigating AI-specific security risks, including adversarial machine learning, prompt injection, model poisoning, data leakage, model governance, and AI supply chain security.
• Knowledge of secure software development practices, API security, cloud-native architectures, identity and access management, encryption, and data protection principles.
• Experience developing enterprise security standards, reference architectures, governance frameworks, and technology roadmaps.
• Familiarity with AI governance, responsible AI principles, model lifecycle management, and emerging regulatory requirements related to AI.
• Knowledge of industry frameworks and standards such as the NIST AI Risk Management Framework (AI RMF), NIST Cybersecurity Framework, ISO/IEC 27001, ISO/IEC 42001, CIS Controls, OWASP Top 10 for LLM Applications, and Zero Trust Architecture principles.
• Excellent analytical, strategic thinking, and problem-solving skills with the ability to balance innovation, business objectives, security requirements, and regulatory compliance.
• Strong verbal and written communication skills with the ability to present complex AI security concepts to both technical and executive audiences.
• Demonstrated ability to influence architectural decisions and collaborate effectively across technology, security, legal, risk, compliance, and business teams.
• Preferred certifications include CISSP, Certified Cloud Security Professional (CCSP), Certified Information Privacy Professional (CIPP), Microsoft Cybersecurity Architect Expert, SABSA, TOGAF, Certified AI Security certifications, or equivalent industry credentials.