Cyber Security Architect - Cloud & AI Security Lead

American Express Global Business Travel; Providence (RI); On-site; USD 104,000 - 194,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Inclusion groups

Internal mobility

Job summary

Amex GBT is seeking a Cyber Security Architect to embed security into product and platform design across the business. You will review designs, model threats, and translate findings into practical mitigations for engineering.

The role sits at the intersection of engineering, risk, and travel technology, covering data protection, supplier integrations, and AI/ML security considerations. You’ll partner with product, engineering, and enterprise architecture to set reusable security patterns and

Qualifications

• 8+ years in cybersecurity, with experience in architecture or security engineering.
• Experience designing/reviewing cloud-based architectures (AWS, Azure, GCP).
• Strong knowledge of IAM, least-privilege, Zero Trust, data protection, and privacy.
• Familiarity with PCI DSS, GDPR, ISO 27001 and related standards.

Responsibilities

• Review designs for new products and major changes using structured threat modeling.
• Define secure patterns and reference architectures; own the review process.
• Set cloud security standards (IAM, encryption, secrets management) and guide API/microservices security.

Skills

Security architecture

Threat modeling

Cloud security

Identity & access management

Stakeholder communication

Education

Bachelor's degree

Tools

AWS

Azure

GCP

PCI DSS

Job description

Amex GBT is seeking a Cyber Security Architect to embed security into product and platform design across the business. You will review designs, model threats, and translate findings into practical mitigations for engineering.

The role sits at the intersection of engineering, risk, and travel technology, covering data protection, supplier integrations, and AI/ML security considerations. You’ll partner with product, engineering, and enterprise architecture to set reusable security patterns and