Enterprise Security Architecture – AI

Our client is a major pharmaceutical company based in Barcelona, and we are looking to incorporate someone into their staff for twelve months an Enterprise Security Architect (IA).

The Enterprise Security Architecture team is looking for an Associate Director, AI Enterprise Security Architecture. This role will contribute to the development of AI Security architectural standards, and the direction and design of architecture for a business or technical domain, while contributing to efforts to elaborate and communicate the architecture of the given domain and/or develop architectural solutions for projects and programs.

Key responsibilities:

• Oversee AI architectural activities for a specific business or technology domain, or architectural practice area, and manage the development of solution architectures for projects or programs within a business area.
• Define AI security standards and direction of architecture in the specific business or technical domain, and establish best practices for protecting AI pipelines, datasets, and models.
• Define and develop the logical architectural design and strategies necessary to secure the Organizations' AI domain / infrastructure
• Utilize architecture patterns to suggest the most adequate utilization of technical platforms in support of the holistic AI solution security architecture design.
• Define, create and evolve the Architecture Governance Framework (e.g. architecture methods, practices and standards ) for AI.
• Understand and advocate the principles of business and IT strategies, Be prepared to sell the Architecture process, its outcome and ongoing results, and to lead the communication, marketing or educational activities needed to ensure Enterprise Architecture success and use.
• Assess the organization's AI landscape and identifying potential vulnerabilities or
• weaknesses including identification and evaluation of risks associated with training, deployment, and operation of AI models; keep up-to-date with the latest security threats, trends, and best practices to ensure the AI security infrastructure remains effective, and evaluate and select security tools, technologies, and products to enhance AI security.
• Collaborate with IT teams to integrate security measures into all aspects of the AI platforms and LLMs related processes, working with data scientists, engineers, and DevOps teams to embed security into the AI development lifecycle, and provide guidance and support to other Engineering teams in implementing security measures and resolving security-related issues
• Regularly reporting on the status of AI security measures to senior management and stakeholders.
• Securing AI systems from development through deployment, including securing training data and monitoring deployed models for threats. Knowledge of AI solutions development lifecycle and environments including MLOps and related tooling (e.g. model repositories, data pipelines, deployment architectures).

Essential Requirements:

• University working and thinking level, degree in business/technical area or comparable education/experience
• 15+ years of working experience in Security domain; minimum 5 years in architecture capacity;
• 2+ years of AI Security essential, with expertise in various AI security products (e.g. Cranium, Noma, JFrog X-Ray, HiddenLayer, Darktrace)
• Demonstrated AI security architecture conceptual skills, solutions delivery, and decision making, incorporating sound security principles, from development through deployment, including securing training data and monitoring deployed models for threats
• Prior experience in AI security policy, standards, guidelines, and patterns definition.
• In depth understanding of the AI security domain including strong knowledge of AI threats and mitigating malicious uses of AI and AI risk identification
• Experience building defences against AI-based attacks, and enforcing data privacy protocols
• Expertise conducting security design evaluations and threat modeling for AI/ML applications running on cloud platforms like Azure/AWS/GCP.
• Experience in reporting to and communicating with senior level management (with and without IT background), with and without in-depth risk management background on information risk topics, and excellent written and verbal communication and presentation skills; interpersonal and collaborative skills.
• Proven experience to initiate and manage projects that will affect other divisions, departments, and functions, as well as the corporate environment, delivery focused with keen attention to detail and good decision-making ability function with/without supervision to deliver in time and at expected quality.
• Experience working in a multi-vendor, global environment and leading technical teams