AI Security Architecture- VP

Who we are looking for We are in Vice President, AI Security Architecture reporting directly to the Managing Director, AI Security and Data Protection. You will lead the design and oversight of secure architecture patterns, reference architectures, standards, and guardrails for artificial intelligence, machine learning, and generative AI solutions across the enterprise. You will partner with engineering, platform, product security, data, risk, and business teams to ensure AI capabilities are secure by design, responsibly implemented, and aligned with internal control and regulatory expectations. Why this role is important to us Global Cybersecurity protects State Street and its clients from the impact of cyber attacks by understanding cyber risk and mitigating it through a robust, continuously evolving cybersecurity program and control environment. Fusion & Security Operations provides real-time knowledge of current cyber threats to better prepare State Street for future threats. This role is critical to enabling secure AI adoption, protecting sensitive data, reducing emerging technology risk, and establishing scalable architecture practices that support innovation without compromising resilience, regulatory readiness, or client trust. What you will be responsible for In this role, you will: • Lead the design and implementation of secure architecture patterns for AI, machine learning, and generative AI systems, including data pipelines, model access, APIs, agents, retrieval-augmented generation, and AI-enabled applications. • Define and maintain enterprise AI security reference architectures, technical standards, guardrails, reusable patterns, and architecture decision criteria. • Lead architecture and design reviews for AI initiatives, ensuring security, privacy, resilience, and control requirements are incorporated early in the solution lifecycle. • Perform AI-focused threat modeling across models, data flows, platforms, integrations, and user interactions, addressing risks such as data leakage, prompt injection, insecure model access, supply chain vulnerabilities, model misuse, and excessive agency. • Translate identified risks into practical security requirements, mitigation strategies, compensating controls, and risk-based architecture decisions. • Partner with engineering, product security, platform, cloud, application, and data teams to embed AI security controls into software development, DevSecOps, model development, deployment, and monitoring workflows. • Develop validation criteria and repeatable assurance patterns for AI platforms, pipelines, models, third-party services, and emerging capabilities. • Provide architecture oversight for generative AI tools, internal AI services, developer productivity solutions, and business-led AI use cases. • Ensure AI security designs align with internal policies and applicable external standards and regulatory expectations, including NIST, ISO, and FFIEC concepts. • Support risk, audit, compliance, and incident management activities through clear documentation of architecture decisions, control designs, residual risks, and remediation actions. • Communicate technical risks, architecture options, and recommendations clearly to engineering teams, business stakeholders, governance forums, and senior leadership. • Mentor architects and security practitioners, promote internal knowledge sharing, and continuously improve AI security architecture practices as technologies and threats evolve.

These skills will help you succeed in this role Deep technical expertise in security architecture, secure design, application security, cloud security, product security, data protection, and modern engineering practices. • Practical understanding of AI and machine learning architectures, generative AI, model and data pipelines, APIs, cloud-native platforms, and AI security risk patterns. • Ability to translate complex technical and emerging risks into clear