Head of Security Architecture

The Head of Security Architecture with deep expertise in AI systems to design, implement, and maintain secure architectures for enterprise security, artificial intelligence and machine learning initiatives across the organisation. This role will define technical security standards, reference architectures, and implementation frameworks that protect traditional IT environments and AI systems, models, data pipelines, and deployments throughout their life-cycle — from conception to production.The Head of Security Architecture will partner with stakeholders and internal teams to establish a comprehensive, forward-looking security strategy and architecture that enables organisational ambitions while managing AI-related security risks.What you’ll be doingWhat will your essential responsibilities include?Work with stakeholders and internal teams to define a comprehensive, forward-looking Security strategy, inclusive of AI Security and Architecture that supports the organisation's global growth ambitions, incorporating policies, standards, and control frameworks applicable across multiple jurisdictions.Establish and evolve governance mechanisms that promote responsible, ethical, and compliant AI use worldwide, considering regional regulatory nuances and cultural sensitivities.Integrate AI security requirements into security and enterprise architecture, software development life cycles, and model life-cycle management, ensuring consistency and agility across diverse operational regions.Will be part of Security Strategy development and does require interaction with executive business leaders for a global organisation. Architecture & Design:Design enterprise-wide security architectures and reference implementationsEstablish secure AI development, training, and deployment pipelinesDefine AI & security data governance and access control frameworks for systemsCreate security-by-design principles for AI model developmentDesign threat models specific to AI/ML systems and attack surfacesTechnical Security Standards:Develop and maintain security frameworks and best practicesCreate secure coding standards for ML engineers and data scientistsEstablish model validation, testing, and verification protocolsDefine encryption, authentication, and authorisation standards for systemsDocument security requirements and technical specificationsInfrastructure & Systems:Architect secure AI infrastructure (cloud, on-prem, hybrid)Design model registry, versioning, and deployment systems with security controlsImplement monitoring, logging, and anomaly detection for AI systemsOversee secure data pipelines and feature storesDesign isolation and sandboxing for high-risk AI workloadsRisk & Threat Mitigation:Conduct threat modelling for AI systems (adversarial attacks, model poisoning, data poisoning)Design defences against AI-specific vulnerabilitiesImplement model robustness testing and validation frameworksCreate incident response architectures for AI security breachesDesign recovery and rollback mechanisms for compromised modelsVendor & Third-Party Management:Evaluate and architect integrations with third-party AI platforms securelyDefine security requirements for AI vendors and SaaS providersDesign secure APIs and interfaces for external AI model accessOversee security architecture of outsourced AI developmentGovernance & Compliance:Align security architecture with regulatory requirements (GDPR, AI Act, industry standards)Design audit trails and compliance monitoring systemsDocument architecture decisions and security trade-offsCollaborate on responsible AI and ethical AI architecture considerationsTeam Leadership & Knowledge Sharing:Lead AI security architecture reviews and design sessionsMentor security engineers and architectsPresent architecture recommendations to technical and executive stakeholdersBuild and maintain security architecture documentationDrive adoption of secure architecture patternsYou will report to Chief Security Officer.What you’ll bring We’re looking for someone who has these abilities and skills:Substantial experience in cyber security, systems architecture, or infrastructure securityProven capabilities in designing and architecture large-scale systemsExperience in hands-on and applied experience with AI/ML security architectureDeep technical knowledge of:Machine learning systems and workflowsAI/ML vulnerabilities and attack vectors (adversarial examples, model extraction, poisoning)Cloud security and containerisation (Docker, Kubernetes)Data security, encryption, and access controlsAPI security and micro-services architectureRobust background in threat modelling and security architecture frameworksExperience with secure software development life-cycle (SSDLC)Advanced degree in Computer Science, Cyber security, or related field (or equivalent)Key CompetenciesExecutive judgement and credibilityGlobal risk thinking and cultural agilityGovernance and control designInfluencing and stakeholder management without direct authorityClear, compelling communication tailored for diverse audiences, including boards and regulatorsBalancing innovation with disciplined risk management on a global scalePreferred SkillsCISSP, CCSK, CISM, AAISM or similar security architecture certificationExperience with MLOps/MLSecOps platformsBackground in machine learning engineering or data scienceExperience with AI governance and responsible AI frameworksKnowledge of AI-specific security standards (NIST AI RMF, ISO/IEC 42001)Experience in regulated industries (finance, healthcare, government)Contributions to open-source security or AI security projectsSpeaking/publishing on AI security topicsWhat we offer InclusionAXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic. At AXA XL, we know that an inclusive culture and enables business growth and is critical to our success. That’s why we have made a strategic commitment to attract, develop, advance and retain the most inclusive workforce possible, and create a culture where everyone can bring their full selves to work and reach their highest potential. It’s about helping one another — and our business — to move forward and succeed.Five Business Resource Groups focused on gender, LGBTQ+, ethnicity and origins, disability and inclusion with 20 Chapters around the globe.Robust support for Flexible Working ArrangementsEnhanced family-friendly leave benefitsNamed to the Diversity Best Practices IndexSignatory to the UK Women in Finance CharterLearn more at axaxl.com/about-us/inclusion-and-diversity. AXA XL is an Equal Opportunity Employer.Total RewardsAXA XL’s Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security. It provides competitive compensation and personalized, inclusive benefits that evolve as you do.We’re committed to rewarding your contribution for the long term, so you can be your best self today and look forward to the future with confidence.SustainabilityAt AXA XL, Sustainability is integral to our business strategy. In an ever-changing world, AXA XL protects what matters most for our clients and communities. We know that sustainability is at the root of a more resilient future. Our 2023-26 Sustainability strategy, called “Roots of resilience”, focuses on protecting natural ecosystems, addressing climate change, and embedding sustainable practices across our operations.Our Pillars:Valuing nature: How we impact nature affects how nature impacts us. Resilient ecosystems - the foundation of a sustainable planet and society – are essential to our future. We’re committed to protecting and restoring nature – from mangrove forests to the bees in our backyard – by increasing biodiversity awareness and inspiring clients and colleagues to put nature at the heart of their plans.Addressing climate change: The effects of a changing climate are far-reaching and significant. Unpredictable weather, increasing temperatures, and rising sea levels cause both social inequalities and environmental disruption. We're building a net zero strategy, developing insurance products and services, and mobilizing to advance thought leadership and investment in societal-led solutions.Integrating ESG: All companies have a role to play in building a more resilient future. Incorporating ESG considerations into our internal processes and practices builds resilience from the roots of our business. We’re training our colleagues, engaging our external partners, and evolving our sustainability governance and reporting.AXA Hearts in Action: We have established volunteering and charitable giving programs to help colleagues support causes that matter most to them, known as AXA XL’s “Hearts in Action” programs. These include our Matching Gifts program, Volunteering Leave, and our annual volunteering day – the Global Day of Giving.For more information, please see axaxl.com/sustainability.Who we areAXA XL, the P&C and specialty risk division of AXA, is known for solving complex risks. For mid-sized companies, multinationals and even some inspirational individuals we don’t just provide re/insurance, we reinvent it.How? By combining a comprehensive and efficient capital platform, data-driven insights, leading technology, and the best talent in an agile and inclusive workspace, empowered to deliver top client service across all our lines of business − property, casualty, professional, financial lines and specialty.With an innovative and flexible approach to risk solutions, we partner with those who move the world forward.Learn more at axaxl.com