AI Security Architect

prudential; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

Prudential seeks an experienced security architect to define and govern AI and Generative AI security across Asia, Africa, and the United Kingdom, establishing architecture principles, blueprints, and controls to reduce risk while enabling secure AI-enabled transformation.

You will collaborate with solution architects and engineers, perform risk assessments, evaluate AI security technologies, and coordinate with auditors and governance teams to ensure regulatory readiness globally.

Qualifications

• 10+ years in IT security for large organizations with hands-on AI/ML security experience.
• Deep knowledge of cloud security across major providers (Azure/GCP/AWS) and AI services.
• Experience with AI threat modelling and risk assessments.
• Familiarity with NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, and OWASP AI/LLM controls.

Responsibilities

• Define AI/ML security architecture and control frameworks.
• Develop reusable AI security blueprints aligned with enterprise standards.
• Assess AI use cases and mitigate AI-related risks.
• Partner with solution architects, developers, and governance teams to enable secure adoption.
• Evaluate emerging AI security technologies to strengthen posture.

Skills

AI security

Cloud security

Threat modelling

Regulatory compliance

Security architecture

Security risk assessments

Vendor collaboration

Tools

Azure AI Foundry

MITRE ATLAS

OWASP AISVS

AI-SPM

Job description

Prudential's purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people's career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed.

This role exists to define and govern security architecture for AI and Generative AI adoption across Prudential, ensuring AI/ML platforms, and AI-enabled applications are designed, built, and operated securely and at scale. It provides strategic security leadership by establishing AI security architecture principles, blueprints, and control requirements that reduce risk, enable responsible AI-driven business transformation, and support regulatory and audit readiness globally.

Prudential has been providing familiar, trusted financial security to our 15 million-plus customers for 95 years. Today, we are headquartered in London and Hong Kong, ranking top three in nine Asian markets through 600,000 agents and over 18,000 bank branches. Prudential is focused on opportunities in the most exciting growth markets in Asia and Africa. With access to over 5 billion people, we are investing in broadening our presence in the life and asset management markets.

Prudential Enterprise Security Architecture and Innovation Department is part of the Group Information Security and Privacy (GISP), which typically focuses on establishing a comprehensive policy, standard, framework and controls to safeguard an organization's assets, data and IT Infrastructure.

GISP Enterprise Security Architecture and Innovation works in conjunction with different Prudential LBU businesses and application owner, Global Technology Division, Enterprise Architect and solution architect across the globe.

This position will cover Asia, Africa and United Kingdom regions, working within GISP Enterprise Security Architecture and Innovation to define the security architecture principles, architecture blueprints, explore and adopt emerging security technologies, with a primary focus on Cloud and Generative AI security.

Responsibilities

• Define and govern security architecture and control frameworks for AI/ML and Generative AI solutions, covering AI platforms, LLMs, agentic AI, RAG pipelines, MCP and model inference environments
• Develop AI security controls, reference architectures, and reusable design patterns aligned with enterprise standards, regulatory expectations, and industry frameworks such as NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, and OWASP Top 10 for LLM Applications, OWASP AISVS
• Define and embed AI-specific security requirements and controls across the AI solution lifecycle based on AI threat modelling, addressing risks such as prompt injection, model poisoning, model theft, sensitive data leakage, and insecure agent/tool integrations
• Serve as a trusted subject matter expert in AI security architecture, providing strategic guidance to solution architects, developers, and business stakeholders.
• Evaluate emerging AI security technologies such as AI DR, AI security posture management (AI-SPM), AI/LLM Gateway, and AI red‑teaming tools to strengthen the organization's security posture and enable secure adoption of AI capabilities.
• Conduct security risk assessments on AI use cases, models, and architecture changes, and provide clear, actionable recommendations to mitigate AI-related risk.
• Partner with internal and external auditors, regulators, AI governance and data privacy teams, and key business stakeholders to support responsible AI adoption, compliance, and Prudential business objectives.
• Identify gaps in existing AI security controls, policies and workflows, and propose practical changes.

Requirements

• More than 10 years of experience in supporting large organization with a focus on IT security, including hands‑on experience securing AI/ML or Generative AI solutions.
• Familiar with dominant Cloud Service Providers' technologies, such as Azure/GCP/AWS/AliCloud, and their AI/ML services (e.g. Azure AI Foundry, Gemini Enterprise...)
• Deep understanding of AI security threats and controls (e.g. OWASP Top 10 for LLM Applications, MITRE ATLAS), in addition to network, encryption, cloud and application security, is mandatory.
• Experienced in leading, driving and completing security projects, including AI security or AI governance initiatives.
• Past experiences with financial institutions are helpful
• Occasional traveling within APAC is expected due to regional duties

Desired professional certifications

• (ISC)2 CISSP
• SABSA, TOGAF
• ISACA CISM, CRISC, AAISM
• AI security and governance related certifications, e.g. GIAC AI Platform Security (GAIPS), ISO/IEC 42001 Lead Implementer.
• Cloud certifications with AI/ML and Security as specialty.

Prudential is an equal opportunity employer. We provide equal