AI Security Architecture, VP

STATE STREET CORPORATION; Quincy (MA); Hybrid; USD 120,000 - 218,000; Full time

Job summary

State Street Corporation is seeking a Vice President, AI Security Architecture to lead enterprise security architecture strategy for AI/ML and generative AI. You will define reference architectures, guardrails, and security patterns across data pipelines, model access, APIs, and deployment layers, partnering with engineering, risk, and product teams to ensure secure-by-design AI capabilities.

You will mentor staff, translate evolving AI threats into actionable requirements, and drive risk-based

Qualifications

• Bachelor’s degree in CS, information security, engineering or a related field.
• 10+ years of progressive cybersecurity experience in security architecture, application security, cloud security or related areas.
• Certifications such as CISSP, CCSP, CSSLP or equivalent preferred.

Responsibilities

• Provide senior technical leadership for enterprise AI security architecture strategy, roadmap, and target-state design across AI capabilities.
• Define and govern enterprise AI security reference architectures, standards, guardrails, and exception processes.
• Lead architecture reviews, threat modeling, and risk assessments for high-risk AI initiatives.
• Embed AI security controls into SDLC, DevSecOps, and AI model development and deployment workflows.
• Collaborate with Engineering, Platform, Product Security, Data, Risk, Compliance, Audit to align AI security priorities.
• Mentor architects and security practitioners and promote adoption of enterprise standards.

Skills

Security architecture

Secure design

Application security

Cloud security

Product security

Data protection

Engineering practices

Education

Bachelor’s degree in CS/Info Security/Engineering

Advanced degree preferred

Tools

Cloud-native architectures

AI/ML platforms

APIs

DevSecOps / CI/CD

Threat modeling

Security testing

Identity and access management

Data pipelines

Logging and monitoring

Security automation

Job description

Who we are looking forWe are looking for an experienced Vice President, AI Security Architecture reporting directly to the Managing Director, AI Security and Data Protection. You will serve as a senior technical leader responsible for defining enterprise security architecture strategy, patterns, standards, and guardrails for artificial intelligence, machine learning, and generative AI solutions. You will lead complex architecture decisions and partner with engineering, platform, product security, data, risk, and business leaders to enable AI capabilities that are secure by design, responsibly implemented, scalable, and aligned with internal control and regulatory expectations.Why This Role is Important To UsGlobal Cybersecurity protects State Street and its clients from the impact of cyber attacks by understanding cyber risk and mitigating it through a robust, continuously evolving cybersecurity program and control environment. Fusion & Security Operations provides real-time knowledge of current cyber threats to better prepare State Street for future threats. This senior Vice President role is critical to shaping the enterprise approach to AI security, influencing strategic technology decisions, and ensuring emerging AI capabilities are introduced with appropriate security, data protection, resilience, and governance controls. The role will establish scalable architecture practices that support innovation while protecting client trust and strengthening regulatory readiness.What You Will Be Responsible ForIn this role, you will:· Provide senior technical leadership for the enterprise AI security architecture strategy, roadmap, and target-state design across artificial intelligence, machine learning, and generative AI capabilities.· Lead the design and implementation of secure architecture patterns for AI systems, including data pipelines, model access, APIs, agents, retrieval-augmented generation, orchestration layers, and AI-enabled applications.· Define, govern, and continuously mature enterprise AI security reference architectures, technical standards, guardrails, reusable patterns, architecture decision criteria, and exception processes.· Serve as a senior authority for architecture and design reviews of complex or high-risk AI initiatives, ensuring security, privacy, resilience, and control requirements are incorporated early in the solution lifecycle.· Lead AI-focused threat modeling across models, data flows, platforms, integrations, and user interactions, addressing risks such as data leakage, prompt injection, insecure model access, supply chain vulnerabilities, model misuse, and excessive agency.· Translate emerging AI threats and regulatory expectations into practical security requirements, control designs, mitigation strategies, compensating controls, and risk-based architecture decisions.· Partner with senior leaders across Engineering, Product Security, Platform, Cloud, Application, Data, Risk, Compliance, and Audit to align AI security priorities and resolve complex design or risk issues.· Embed AI security controls into software development, DevSecOps, model development, deployment, validation, monitoring, and incident response workflows.· Establish repeatable assurance and validation criteria for AI platforms, pipelines, models, third-party services, developer tools, and business-led AI use cases.· Provide architecture oversight for generative AI tools, internal AI services, developer productivity solutions, and strategic enterprise AI programs.· Advise governance forums and senior leadership on technical risk, architecture options, residual exposure, investment priorities, and recommended decisions.· Support risk, audit, compliance, and incident management activities through clear documentation of architecture decisions, control designs, residual risks, remediation actions, and evidence.· Mentor architects and security practitioners, build organizational capability, promote knowledge sharing, and continuously improve AI security architecture practices as technologies and threats evolve.What We ValueThese skills will help you succeed in this role:· Extensive technical leadership experience across security architecture, secure design, application security, cloud security, product security, data protection, and modern engineering practices.· Deep practical understanding of AI and machine learning architectures, generative AI, large language models, model and data pipelines, APIs, cloud-native platforms, and AI security risk patterns.· Demonstrated ability to set architecture direction, lead complex cross-functional decisions, and translate emerging risks into scalable requirements, control designs, implementation patterns, and executive recommendations.· Significant experience leading architecture reviews, threat modeling, technical risk assessments, and secure-by-design programs in large, complex, regulated enterprises.· Strong executive communication, collaboration, and influencing skills across Security, Engineering, Technology, Data, Risk, Compliance, Audit, and business leadership.· Proven ability to mentor senior practitioners, establish architecture governance, and drive adoption of enterprise standards across global teams.· Execution-focused leadership, sound judgment, strong problem-solving skills, and a commitment to measurable risk reduction and sustainable control outcomes.· Curiosity, adaptability, and continuous learning in a rapidly evolving AI security landscape.Education & Preferred Qualifications• Degree required: Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline; advanced degree preferred.• Years of experience: 10+ years of progressive experience in cybersecurity, including significant experience in security architecture, application security, product security, cloud security, or security engineering.• Certifications required or preferred: CISSP, CCSP, CSSLP, cloud security, architecture, or comparable industry certifications preferred.• Knowledge of tools or technologies: Cloud-native architectures; AI and machine learning platforms; generative AI and large language model solutions; APIs; data pipelines; DevSecOps and CI/CD; threat modeling; security testing; identity and access management; data protection; logging, monitoring, and security automation.• Additional language requirements: N/A.• Other qualifications: Experience securing enterprise-scale platforms and applications, working in regulated environments, establishing reusable architecture standards, and communicating technical risk to engineering and senior leadership audiences.Additional RequirementsAdditional requirements for this role include the ability to coordinate across global teams and time zones, support high-priority architecture, risk, audit, and incident activities as needed, and manage sensitive information in accordance with company requirements. Travel may be required based on business needs.Work Requirement• Hybrid Work Requirement: Hybrid, subject to company and location-specific requirements.• Shift Timings: Standard business hours with flexibility to support global stakeholders and critical security, architecture, or regulatory needs.Salary Range:$120,000 - $217,500 AnnualThe range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.Employees are eligible to participate in State Street’s comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.For a full overview, visit https://hrportal.ehr.com/statestreet/Home .About State StreetAcross the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success.We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future.As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law.Discover more information on jobs at StateStreet.com/careersRead our CEO StatementJob Application Disclosure:It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.