VP, AI Security Architecture: Secure by Design Leader

State Street; Clifton (NJ); Hybrid; USD 120,000 - 203,000; Full time

Job summary

State Street is seeking a Vice President of AI Security Architecture to lead secure architecture patterns for AI, ML, and generative AI across the enterprise. You will collaborate with engineering, data, risk, and compliance to ensure secure-by-design AI capabilities and alignment with regulatory expectations.

Key responsibilities include threat modeling, architecture reviews, and embedding security controls into DevSecOps, with a focus on data protection, privacy, and resilience in regulated

Qualifications

• Deep technical expertise in security architecture, secure design, and modern engineering practices.
• Experience leading architecture reviews, threat modeling, and secure-by-design programs in complex enterprise environments.
• Ability to translate complex risks into architecture requirements and executive decisions.
• Strong collaboration across Security, Engineering, Data, Risk, Compliance, Audit, and business teams.

Responsibilities

• Lead the design and implementation of secure architecture patterns for AI, ML, and generative AI systems, including data pipelines, model access, APIs, agents, retrieval-augmented generation, and AI-enabled applications.
• Define and maintain enterprise AI security reference architectures, technical standards, guardrails, reusable patterns, and architecture decision criteria.
• Lead architecture and design reviews for AI initiatives, ensuring security, privacy, resilience, and control requirements are incorporated early in the solution lifecycle.
• Perform AI-focused threat modeling across models, data flows, platforms, integrations, and user interactions, addressing risks such as data leakage, prompt injection, insecure model access, supply chain vulnerabilities, model misuse, and excessive agency.
• Translate identified risks into practical security requirements, mitigation strategies, compensating controls, and risk-based architecture decisions.
• Partner with engineering, product security, platform, cloud, application, and data teams to embed AI security controls into software development, DevSecOps, model development, deployment, and monitoring workflows.
• Develop validation criteria and repeatable assurance patterns for AI platforms, pipelines, models, third-party services, and emerging capabilities.
• Provide architecture oversight for generative AI tools, internal AI services, developer productivity solutions, and business-led AI use cases.
• Ensure AI security designs align with internal policies and applicable external standards and regulatory expectations, including NIST, ISO, and FFIEC concepts.
• Support risk, audit, compliance, and incident management activities through clear documentation of architecture decisions, control designs, residual risks, and remediation actions.
• Communicate technical risks, architecture options, and recommendations clearly to engineering teams, business stakeholders, governance forums, and senior leadership.
• Mentor architects and security practitioners, promote internal knowledge sharing, and continuously improve AI security architecture practices as technologies and threats evolve.

Skills

Security architecture

Secure design

Cloud security

Application security

Data protection

Product security

Security engineering

DevSecOps

Threat modeling

Communication with leadership

Education

Bachelor's degree in CS/InfoSec/Engineering

10+ years cybersecurity

CISSP

CCSP

CSSLP

Tools

Cloud-native platforms

AI/ML platforms

Generative AI

APIs

Data pipelines

DevSecOps

CI/CD

Threat modeling

Security testing

Identity & access management

Data protection

Logging & monitoring

Security automation

Job description

State Street is seeking a Vice President of AI Security Architecture to lead secure architecture patterns for AI, ML, and generative AI across the enterprise. You will collaborate with engineering, data, risk, and compliance to ensure secure-by-design AI capabilities and alignment with regulatory expectations.

Key responsibilities include threat modeling, architecture reviews, and embedding security controls into DevSecOps, with a focus on data protection, privacy, and resilience in regulated