AI Security Architect

IQVIA LLC; Greater London; On-site; GBP 120,000 - 170,000; Full time

Job summary

IQVIA is seeking an AI Security & Governance Architect to join our Security Architecture team. You will drive governance, risk assessment, and security controls for enterprise AI adoption across the globe, partnering with Dev, Data Office, and Legal.

This senior IC will mature AI security programs, establish guardrails, and ensure secure integration of Copilot, Claude, and other generative AI tools. You will help scale AI governance with structured assessments, security reviews, and clear

Qualifications

• Extensive experience in information security, security architecture, or related roles with AI security focus.
• Knowledge of generative AI risks (prompt injection, data leakage, model abuse) and controls.
• Experience governing enterprise AI adoption and working with governance bodies.
• Familiarity with AI security frameworks (OWASP LLM Top 10, NIST AI RMF) and EU AI Act relevance.
• Ability to translate security requirements into practical guidance for developers and business teams.
• Background in cloud security across Azure and AWS with data residency and risk considerations.

Responsibilities

• Contribute to and execute IQVIA's AI security strategy across governance and risk workstreams.
• Partner with business units, Dev teams, and the Data Office to scale AI adoption securely.
• Own AI security intake and review for new AI platforms and tools with structured assessments.
• Represent Security Architecture in AI governance committees and embed security requirements.
• Develop and maintain AI security standards, reference architectures, and guardrails.
• Conduct architecture reviews for AI integrations, including RAG, LLM APIs, and multi-model patterns.
• Build scalable AI security workflows, playbooks, and decision frameworks for efficient reviews.
• Define security requirements for enterprise AI platforms including prompt security and data governance.
• Collaborate with Legal, Privacy, and Compliance on AI-related regulatory obligations.
• Produce governance metrics and executive visibility on AI adoption risk and maturity.

Skills

AI security

Cloud security

Application security

Generative AI security

Security architecture

Governance & compliance

Education

Bachelor's degree in Computer Science or equivalent

Tools

Microsoft Azure

Amazon AWS

LLM platforms

Job description

The AI Security & Governance Architect is a senior individual contributor role within IQVIA’s Security Architecture team. Artificial intelligence and generative AI are transforming how IQVIA operates — from developer productivity and business workflows to data analytics and clinical innovation. As adoption accelerates across the enterprise, the security organization must scale its ability to govern, assess, and enable that adoption responsibly and at pace. This role sits within a broader AI security strategy function and reports to the Security Architecture leader responsible for IQVIA’s enterprise AI security direction. The AI Security & Governance Architect is instrumental in executing and maturing that strategy: working directly with development teams, the Data Office, and business units across IQVIA’s global operations to embed security and governance into AI adoption — asking the right questions, establishing the right workflows, and maintaining the visibility and control the organization needs as AI use scales. IQVIA has existing AI governance committees and taskforces in place. This role is not a greenfield build, but the pace of AI adoption across the business demands a significant step‑up in program maturity, coverage, and consistency. The AI Security & Governance Architect will be central to that effort — owning key governance and assessment workstreams, representing Security Architecture in cross‑functional forums, and ensuring that as IQVIA scales its use of technologies such as Microsoft Copilot, Claude, and other leading generative AI platforms, it does so with the appropriate security controls, governance frameworks, and architectural guardrails in place. You will sit within the global Information Security organization, with close working relationships across Security Architecture, Cloud Security, Application Security, the Data Office, Legal, Privacy, Compliance, and business units spanning IQVIA’s global operations.

Principal responsibilities

• Contribute to and help execute IQVIA’s AI security strategy, providing hands‑on program delivery across governance, risk assessment, and stakeholder engagement workstreams under the direction of the Security Architecture AI lead.
• Act as a primary security architecture partner for business units, development teams, and the Data Office as they evaluate, adopt, and scale generative AI tools and platforms — including productivity and developer assistance tools, enterprise AI platforms, and AI‑enabled workflows — ensuring security requirements are understood and addressed from the outset.
• Own and operate the AI security intake and review process for new generative AI platform and tool requests, conducting structured security assessments that evaluate vendor security posture, data handling and residency practices, telemetry and logging controls, and acceptable use implications before organisational adoption is approved.
• Represent Security Architecture in IQVIA’s existing AI governance committees and taskforces, ensuring security risk positions, architectural guardrails, and governance requirements are embedded in decisions and communicated consistently across the organisation.
• Develop, maintain, and operationalise AI security standards, guidelines, and reference architectures covering generative AI platforms, LLM‑integrated applications, agentic systems, and AI‑enabled developer and productivity tooling.
• Conduct AI security architecture reviews for new and existing AI integrations, including agentic workflows, retrieval‑augmented generation (RAG) pipeline designs, LLM API integrations, and multi‑model orchestration patterns — identifying risks and defining appropriate mitigations in collaboration with development and platform teams.
• Build and maintain scalable AI security workflows, assessment playbooks, and decision frameworks that enable the organisation to evaluate AI adoption requests efficiently, consistently, and without creating unnecessary friction for business delivery.
• Define and maintain security requirements for enterprise generative AI platforms, addressing prompt security, data residency, access and identity controls, output handling, audit logging, and integration with IQVIA’s broader identity and data governance controls.
• Partner with development teams to provide practical AI security guidance, supporting the secure design of AI‑integrated applications and ensuring development teams have the guidance, patterns, and standards needed to build responsibly with AI technologies.
• Support the development of AI security awareness and guidance materials for developers, data teams, and business stakeholders across IQVIA, ensuring consistent understanding of how AI tools should be used within IQVIA’s security and governance framework.
• Monitor the evolving AI security and regulatory landscape — including emerging attack techniques, model provider disclosures, and developments in AI regulation — and translate findings into timely, actionable updates to IQVIA’s AI governance posture and security standards.
• Collaborate with Legal, Privacy, and Compliance teams on AI‑related regulatory requirements, including obligations under the EU AI Act, GDPR implications of AI data processing, and sector‑specific requirements applicable to life sciences and healthcare AI deployments.
• Define metrics and reporting for AI security governance, providing CISO leadership and governance stakeholders with clear visibility into AI adoption volume, risk profile, assessment coverage, and programme maturity across the organisation.

Required Experience and Qualifications

• Substantial progressive experience in Information Security, Security Architecture, or related technical roles, with demonstrated expertise in AI security, cloud security, or application security.
• Strong working knowledge of generative AI security risks and controls, including prompt injection, data leakage, model abuse, output manipulation, and the supply chain and integration risks associated with third‑party AI platforms and APIs.
• Experience assessing and governing the adoption of enterprise AI and generative AI tools, including productivity platforms such as Microsoft Copilot, developer assistance tools, and LLM‑integrated applications and workflows.
• Familiarity with AI security frameworks and standards including OWASP LLM Top 10 and NIST AI RMF, and working awareness of EU AI Act obligations relevant to enterprise AI governance and security.
• Experience engaging with governance committees, risk review boards, or cross‑functional taskforces as a security subject matter expert, influencing decisions and representing security requirements to non‑security stakeholders.
• Working knowledge of cloud environments (Microsoft Azure and/or Amazon AWS) and the AI and ML services offered within those platforms, with the ability to assess security configurations, data handling behaviours, and integration risks.
• Experience partnering with development teams, data teams, and business stakeholders to translate security and governance requirements into practical, delivery‑compatible guidance and standards.
• Strong understanding of data protection principles as they apply to AI systems, including data residency, purpose limitation, PHI and PII handling in AI workflows, and cross‑border data transfer implications under GDPR and applicable regional regulations.
• Familiarity with secure architecture patterns for LLM‑integrated systems, including RAG pipeline security, agentic system design, prompt workflow controls, and API gateway patterns for model endpoints is preferred.
• Experience within regulated industries — life sciences, healthcare, or financial services — with awareness of sector‑specific compliance and data protection obligations relevant to AI use is preferred.
• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience is preferred.
• Relevant certifications such as CISSP, CISM, CCSP, AWS/Azure Security Specialty, or equivalent are preferred but not mandatory.
• Strong written and verbal communication skills in English, with the ability to produce governance documentation, security standards, and executive‑level reporting across a global, matrixed organisation.

IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create intelligent connections to accelerate the development and commercialisation of innovative medical treatments to help improve patient outcomes and population health worldwide. Learn more at https://jobs.iqvia.com IQVIA is committed to integrity in our hiring process and maintains a zero tolerance policy for candidate fraud. All information and credentials submitted in your application must be truthful and complete. Any false statements, misrepresentations, or material omissions during the recruitment process will result in immediate disqualification of your application, or termination of employment if discovered later, in accordance with applicable law. We appreciate your honesty and professionalism. IQVIA is a leading global provider of clinical research services, commercial insights and healthcare intelligence to the life sciences and healthcare industries. We create connections that accelerate the development and commercialisation of innovative medical treatments. Everything we do is part of a journey to improve patient outcomes and population health worldwide. To get there, we seek out diverse talent with curious minds and a relentless commitment to innovation and impact. No matter your role, everyone at IQVIA contributes to our shared goal of helping customers improve the lives of patients everywhere. Thank you for your interest in growing your career with us.