Cyber Security Architect

Harvey Nash; Alpharetta (GA); On-site; USD 160,000 - 210,000; Full time

Job summary

Harvey Nash is seeking a Sr. AI Security Architecture and Risk Advisor to lead security design for the enterprise AI program.

You will shape reference architectures, risk tiering, and guardrail standards that enable rapid, safe AI adoption, with responsibilities across Cybersecurity, AI Center of Excellence, and governance. This role requires 10+ years in security architecture focusing on cloud-native AI/ML, risk frameworks, and policy-as-code.

Qualifications

• 10+ years in security architecture, with cloud‑native, AI/ML, or platform security focus.
• Hands‑on experience with AI risk frameworks and governance models.
• Experience translating security policy into platform‑enforceable controls.

Responsibilities

• Lead enterprise AI security reference architecture in partnership with Cybersecurity Architecture and AI Center of Excellence.
• Develop and steward AI risk‑assessment framework with clear criteria for decisions at scale.
• Define guardrail thresholds for hallucination, PII/PHI exposure, prompt injection, and data access policies.
• Develop threat models (STRIDE/MAESTRO/MITRE ATLAS) for new AI patterns and contribute architecture decisions.
• Represent Cyber's AI security perspective in governance and translate decisions into policy.

Skills

Security architecture

AI/ML security

Cloud-native security

Risk frameworks

Policy-as-code

Executive-level communication

Governance collaboration

Education

Bachelor’s degree in CS/Cybersecurity or related field

Tools

Sentinel

LangGraph

AutoGen

Job description

Job Title: AI Security Architecture and Risk, Sr. Advisor

Type: Direct Hire

Location: New Hagerstown, OH or Alpharetta GA

About your role

You will lead the security design and risk‑assessment approach for the enterprise AI program, shaping the reference architectures, risk tiering, and guardrail standards that let the business adopt AI quickly and safely. Sitting within Cybersecurity, this role helps lead a cross‑functional model for AI security that connects the strengths of Cyber, the AI Center of Excellence, Cybersecurity Architecture, Risk, and the business units. It is a cornerstone of the AI Security Protection team and a driver of the transformation to secure‑by‑design AI delivery.

What you’ll do

• Help lead the enterprise AI security reference architecture — partnering with Cybersecurity Architecture and the AI Center of Excellence to define approved patterns and secure defaults for AI and agentic workloads, and to evaluate incoming designs against them.
• Help build and steward the AI risk‑assessment framework — a multi‑factor risk‑tiering model that routes initiatives into delivery lanes (Standard, Elevated Risk, Experimentation) with clear, auditable criteria for rapid, consistent decisions at scale.
• Define the control requirements and thresholds that AI protection tooling enforces — guardrail thresholds for hallucination, PII/PHI exposure, prompt injection, and toxicity, plus data‑access policy — and bring security leadership to the build‑vs‑buy strategy for that layer (e.g., Arize, Fiddler, Varonis, or equivalent).
• Develop and maintain STRIDE, MAESTRO, and MITRE ATLAS threat models for new AI system patterns, and contribute the Architecture Decision Records that keep the program defensible to internal auditors and regulators.
• Represent Cyber's AI security perspective in AI Center of Excellence governance, and help translate design decisions into platform‑enforceable policy and guardrails.
• Evaluate emerging agentic AI frameworks (multi‑agent orchestration, LLM tool‑calling, autonomous workflows) for architectural risk and help define secure defaults with partner teams before they reach production.
• Lay the groundwork for a future automation layer by designing controls and decision logic so they can be progressively operated by AI agents as the program matures.
• Responsibilities listed are not intended to be all‑inclusive and may be modified as necessary.

Experience you’ll need to have

• 10+ years in security architecture, with a focus on cloud‑native, AI/ML, or platform security domains.
• Hands‑on proficiency with AI risk frameworks: NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10, and ISO/IEC 42001, MAESTRO.
• Demonstrated experience designing risk‑classification or governance models that balance security assurance against delivery speed.
• Experience with policy‑as‑code tooling (Sentinel) and translating security policy into platform‑enforceable controls.
• Familiarity with the commercial AI protection landscape — observability, guardrails, and data security posture management — sufficient to make credible build‑vs‑buy and tooling recommendations.
• A track record of leading through influence across organizational boundaries, building alignment with governance, platform, and business teams to deliver shared outcomes.
• Strong technical communication skills; proven ability to present architecture and risk positions to SVP and C‑suite audiences.
• Bachelor's degree in Computer Science, Cybersecurity, or a related field, and/or equivalent work experience.

Experience that would be great to have

• Experience in financial services or other regulated industries with AI governance under frameworks such as the EU AI Act, ISO/IEC 42001, or model risk guidance such as SR 11‑7.
• Hands‑on experience evaluating LLM‑based agent orchestration systems (LangGraph, AutoGen, CrewAI, or equivalent) in a security or governance context.
• Experience helping shape cross‑functional operating models as organizations scale new technology capabilities.
• Certification in CISSP, CISM, or equivalent; advanced credentials in AI, cloud, or zero trust security.
• Proven experience contributing to enterprise‑level threat modeling programs with patterns adopted by engineering teams.