AI Security Architect: Standards & Governance

Bank of America; Denver (CO); On-site; USD 142,000 - 203,000; Full time

Benefits offered by this job

Discretionary incentive eligible

Annual discretionary award

Job summary

Bank of America is seeking an AI Security Standards Architect to define and lead the security strategy for AI/ML systems. You will collaborate with engineering, risk, and business teams to embed governance, controls, and threat modeling across the lifecycle.

The role requires deep knowledge of GenAI/LLMs, MITRE ATLAS, OWASP Top 10 for GenAI, and NIST AI RMF, with strong executive communication and the ability to align security with business needs.

Qualifications

• 5+ years of cybersecurity experience with at least 2 years in AI/ML system assessment.
• Deep understanding of Generative AI/LLMs and assessment frameworks including MITRE ATLAS, OWASP Top 10 for GenAI, and NIST AI RMF.
• Knowledge of governance, policies, and controls for AI use cases and lifecycle of AI models and data dependencies.

Responsibilities

• Define and lead the AI security strategy and standards across AI/ML lifecycles.
• Partner with engineering, risk, and business teams to apply secure AI practices, including threat modeling and control validation.
• Define security requirements ensuring traceability between controls, risks, and governance frameworks.
• Monitor information security trends and keep leadership informed.

Skills

Cybersecurity

AI/ML Security

MITRE ATLAS

NIST AI RMF

OWASP GenAI Top 10

Executive presence

Stakeholder management

Cloud security

Education

CS/IT degree

Job description

Bank of America is seeking an AI Security Standards Architect to define and lead the security strategy for AI/ML systems. You will collaborate with engineering, risk, and business teams to embed governance, controls, and threat modeling across the lifecycle.

The role requires deep knowledge of GenAI/LLMs, MITRE ATLAS, OWASP Top 10 for GenAI, and NIST AI RMF, with strong executive communication and the ability to align security with business needs.