AI Security Architect & Governance Lead

Bank of America; Washington (District of Columbia); On-site; USD 142,000 - 203,000; Full time

Benefits offered by this job

Benefits eligible

Annual discretionary plan

Job summary

Bank of America is seeking an AI Security Standards Architect to define and lead the AI security strategy across the full lifecycle. You will work with engineering, risk and business teams to embed secure AI practices, perform threat modeling, and ensure alignment with regulatory and enterprise risk frameworks.

You will monitor AI security trends, communicate risk to leadership, and drive governance across data, models, and integrations. Strong executive presence is essential.

Qualifications

• 5+ years in cybersecurity with 2+ years in AI/ML security assessments.
• Strong knowledge of AI/ML lifecycle risks, governance, and controls.
• Experience evaluating security controls in cloud/PaaS environments.

Responsibilities

• Define and lead AI security strategy and standards across data, models, APIs, and integrations.
• Identify and mitigate AI-specific risks like model abuse, prompt injection, data leakage.
• Partner with engineering, risk, and business teams to operationalize secure AI practices.
• Document traceability between controls, risks and governance frameworks.
• Monitor security trends and inform leadership on risk posture.

Skills

Customer and Client Focus

Cyber Security

Data Governance

Executive Presence

Information Systems Management

Architecture

Business Intelligence

Risk Management

Threat Analysis

Vendor Management

Education

Bachelor's and/or Master's degree in Computer Science, Information Technology or related field

Job description

Bank of America is seeking an AI Security Standards Architect to define and lead the AI security strategy across the full lifecycle. You will work with engineering, risk and business teams to embed secure AI practices, perform threat modeling, and ensure alignment with regulatory and enterprise risk frameworks.

You will monitor AI security trends, communicate risk to leadership, and drive governance across data, models, and integrations. Strong executive presence is essential.