GenAI Security Architect: Governance & Risk

Bank of America; Chicago (IL); On-site; USD 142,000 - 203,000; Full time

Job summary

Bank of America is seeking an AI Security Standards Architect to define and lead security strategy for AI/ML systems across data, models, and integrations. You will partner with engineering, risk, and business teams to embed secure AI practices, perform threat modeling, and ensure governance alignment with regulatory and enterprise risk frameworks.

The role requires 5+ years in cybersecurity with a focus on AI/ML, plus strong communication skills for senior leadership and cross-functional

Qualifications

• Minimum 5+ years in cybersecurity with at least 2 years focused on AI/ML systems
• Deep understanding of Generative AI/LLMs and assessment frameworks
• Knowledge of governance frameworks, controls, and AI lifecycle risks
• Ability to bridge security concepts with engineering teams
• Experience evaluating cybersecurity controls for cloud, PaaS environments
• Strong executive communication and stakeholder management
• Ability to lead cross-functional collaboration and drive decisions

Responsibilities

• Define and lead the AI security strategy and standards across data, model, APIs, and integrations
• Identify and mitigate AI-specific risks including data leakage and model theft
• Collaborate with engineering, risk, and business teams to implement secure AI practices
• Document traceability between controls, risks, and governance frameworks
• Monitor security trends and inform leadership on risk posture

Skills

Customer focus

Cyber Security

Data Governance

Executive Presence

Information Systems Management

Architecture

Business Intelligence

Risk Management

Threat Analysis

Vendor Management

Education

Bachelor's degree in Computer Science / Information Technology

Tools

MITRE ATLAS

OWASP Top 10 for GenAI

NIST AI RMF

Job description

Bank of America is seeking an AI Security Standards Architect to define and lead security strategy for AI/ML systems across data, models, and integrations. You will partner with engineering, risk, and business teams to embed secure AI practices, perform threat modeling, and ensure governance alignment with regulatory and enterprise risk frameworks.

The role requires 5+ years in cybersecurity with a focus on AI/ML, plus strong communication skills for senior leadership and cross-functional