AI Security Architect

Prudential Hong Kong Limited; Singapore; On-site; SGD 180,000 - 280,000; Full time

Job summary

Prudential Hong Kong Limited is seeking a senior security architect to define and govern AI/Generative AI security across the organisation. You will establish security architecture principles, blueprints and controls to reduce risk while enabling responsible AI-driven business transformation.

The role covers Asia, Africa and the UK regions, liaising with GIS and governance teams, auditors and regulators to support compliant AI adoption at scale.

Qualifications

• 10+ years securing IT in large orgs, incl. AI/ML or Generative AI.
• Deep knowledge of AI security threats and controls (OWASP, MITRE ATLAS).
• Experience leading security projects and AI governance initiatives.
• Financial institution experience is a plus.

Responsibilities

• Define AI security architecture and control frameworks.
• Develop AI security controls and reference architectures.
• Evaluate emerging AI security technologies to strengthen posture.
• Partner with auditors, regulators, and governance teams.

Skills

AI security

Cloud security

Security architecture

Threat modelling

Auditing

Leadership

Education

(ISC)2 CISSP

TOGAF

CISM

GAIPS

ISO/IEC 42001 Lead Implementer

Tools

Azure AI Foundry

Gemini Enterprise

AI/ML services (Azure/GCP/AWS)

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. This role exists to define and govern security architecture for AI and Generative AI adoption across Prudential, ensuring AI/ML platforms, and AI-enabled applications are designed, built, and operated securely and at scale. It provides strategic security leadership by establishing AI security architecture principles, blueprints, and control requirements that reduce risk, enable responsible AI-driven business transformation, and support regulatory and audit readiness globally. Prudential has been providing familiar, trusted financial security to our 15 million-plus customers for 95 years. Today, we are headquartered in London and Hong Kong, ranking top three in nine Asian markets through 600,000 agents and over 18,000 bank branches. Prudential is focused on opportunities in the most exciting growth markets in Asia and Africa. With access to over 5 billion people, we are investing in broadening our presence in the life and asset management markets. Prudential Enterprise Security Architecture and Innovation Department is part of the Group Information Security and Privacy (GISP), which typically focuses on establishing a comprehensive policy, standard, framework and controls to safeguard an organization’s assets, data and IT Infrastructure. GISP Enterprise Security Architecture and Innovation works in conjunction with different Prudential LBU businesses and application owner, Global Technology Division, Enterprise Architect and solution architect across the globe. This position will cover Asia, Africa and United Kingdom regions, working within GISP Enterprise Security Architecture and Innovation to define the security architecture principles, architecture blueprints, explore and adopt emerging security technologies, with a primary focus on Cloud and Generative AI security.

Responsibilities:

• Define and govern security architecture and control frameworks for AI/ML and Generative AI solutions, covering AI platforms, LLMs, agentic AI, RAG pipelines, MCP and model inference environments.
• Develop AI security controls, reference architectures, and reusable design patterns aligned with enterprise standards, regulatory expectations, and industry frameworks such as NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, and OWASP Top 10 for LLM Applications, OWASP AISVS.
• Define and embed AI-specific security requirements and controls across the AI solution lifecycle based on AI threat modelling, addressing risks such as prompt injection, model poisoning, model theft, sensitive data leakage, and insecure agent/tool integrations.
• Serve as a trusted subject matter expert in AI security architecture, providing strategic guidance to solution architects, developers, and business stakeholders.
• Evaluate emerging AI security technologies such as AI DR, AI security posture management (AI-SPM), AI/LLM Gateway, and AI red-teaming tools to strengthen the organization’s security posture and enable secure adoption of AI capabilities.
• Conduct security risk assessments on AI use cases, models, and architecture changes, and provide clear, actionable recommendations to mitigate AI-related risk.
• Partner with internal and external auditors, regulators, AI governance and data privacy teams, and key business stakeholders to support responsible AI adoption, compliance, and Prudential business objectives.
• Identify gaps in existing AI security controls, policies and workflows, and propose practical changes.

Requirements:

• More than 10 years of experience in supporting large organization with a focus on IT security, including hands-on experience securing AI/ML or Generative AI solutions.
• Familiar with dominant Cloud Service Providers’ technologies, such as Azure/GCP/AWS/AliCloud, and their AI/ML services (e.g. Azure AI Foundry, Gemini Enterprise…).
• Deep understanding of AI security threats and controls (e.g. OWASP Top 10 for LLM Applications, MITRE ATLAS), in addition to network, encryption, cloud and application security, is mandatory.
• Experienced in leading, driving and completing security projects, including AI security or AI governance initiatives.
• Past experiences with financial institutions are helpful.
• Occasional traveling within APAC is expected due to regional duties.
• Desired professional certifications: (ISC)2 CISSP SABSA, TOGAF ISACA CISM, CRISC, AAISM AI security and governance related certifications, e.g. GIAC AI Platform Security (GAIPS), ISO/IEC 42001 Lead Implementer.
• Cloud certifications with AI/ML and Security as specialty.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law.

We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location.

We also allow for reasonable adjustments to support people with individual physical or mental health requirements.

We are Prudential. For every life, we are partners. For every future, we are protectors. Prudential plc provides life and health insurance and asset management to 17 million customers across 20 markets in Asia and Africa. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. We are focused on four strategic regions: Greater China, ASEAN, India and Africa. Our customers are served by around 55,000 agents and more than 200 bank partners. Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom.

Find out more at www.prudentialplc.com Follow us on LinkedIn