AI Security Architect

Overview

At Prudential, our mission is to support every life and safeguard every future through a culture that embraces diversity and inclusion, enabling our people to deliver impactful work and grow professionally. We offer a collaborative environment where employees can connect, develop, and achieve success.

This position is responsible for defining and overseeing the security architecture for AI and Generative AI adoption across Prudential. The role ensures AI/ML platforms and AI-powered applications are securely architected, developed, and managed at scale. It delivers strategic security leadership by setting AI security architecture principles, blueprints, and control standards to minimize risk, facilitate responsible AI-driven transformation, and ensure compliance with regulatory and audit requirements on a global level.

Company Background

Prudential has provided dependable financial protection to over 15 million customers for 95 years. With headquarters in London and Hong Kong, we rank among the top three in nine Asian markets, supported by 600,000 agents and over 18,000 bank branches. Our growth focus includes expanding life and asset management services across Asia and Africa, accessible to over 5 billion people.

The Enterprise Security Architecture and Innovation department is part of Group Information Security and Privacy (GISP), which develops policies, standards, frameworks, and controls to secure organizational assets, data, and IT infrastructure. The team collaborates with Prudential's various business units, application owners, global technology, enterprise, and solution architects worldwide.

This role covers responsibilities across Asia, Africa, and the UK regions, focusing on cloud and generative AI security.

Primary Responsibilities

• Establish and manage security architecture and control frameworks for AI/ML and Generative AI solutions, encompassing AI platforms, large language models (LLMs), agentic AI, retrieval-augmented generation (RAG) pipelines, multi-cloud platforms, and model inference environments.
• Create AI security controls, reference architectures, and reusable design patterns consistent with enterprise standards, regulatory frameworks, and industry benchmarks like NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, OWASP Top 10 for LLM Applications, and OWASP AI Security Verification Standard (AISVS).
• Integrate AI-specific security requirements and controls throughout the AI solution lifecycle informed by AI threat modeling, addressing risks such as prompt injection, model poisoning, intellectual property theft, sensitive data exposure, and insecure integrations with agents or tools.
• Act as the authority on AI security architecture by providing strategic advice to solution architects, developers, and business stakeholders.
• Assess emerging AI security technologies including AI disaster recovery, AI security posture management (AI-SPM), AI/LLM gateways, and AI red-teaming tools to enhance security posture and enable safe AI adoption.
• Perform security risk evaluations for AI use cases, models, and architecture updates, delivering actionable recommendations to mitigate AI-related vulnerabilities.
• Collaborate with auditors, regulators, AI governance, data privacy teams, and essential business partners to support responsible AI use, compliance, and organizational objectives.
• Identify deficiencies in current AI security controls, policies, and workflows, and recommend feasible improvements.

Required Qualifications and Experience

• Over 10 years of experience supporting IT security within large organizations, including direct hands-on involvement securing AI/ML or Generative AI systems.
• Strong familiarity with leading cloud providers like Microsoft Azure, Google Cloud Platform, Amazon Web Services, and Alibaba Cloud, including their AI/ML offerings such as Azure AI Foundry or Gemini Enterprise.
• Extensive knowledge of AI-specific security threats and defenses (such as those outlined by OWASP Top 10 for LLM Applications and MITRE ATLAS), alongside expertise in network security, encryption, cloud security, and application protection.
• Proven leadership in delivering security projects and initiatives related to AI security or governance.
• Experience in the financial sector is advantageous.
• Willingness to travel occasionally within the Asia-Pacific region as required by the role.

Preferred Certifications

• (ISC)2 Certified Information Systems Security Professional (CISSP)
• SABSA or TOGAF architecture certifications
• ISACA certifications such as CISM, CRISC, or AAISM
• Specialized qualifications in AI security and governance, such as GIAC AI Platform Security (GAIPS) or ISO/IEC 42001 Lead Implementer
• Cloud certifications emphasizing AI/ML and Security domains

Equal Opportunity Commitment

Prudential is committed to equal employment opportunity and provides equitable benefits and support regardless of gender, race, age, ethnicity, education, cultural background, marital status, pregnancy, religious beliefs, disabilities, or employment type. We comply with all applicable laws and accommodate individuals with physical or mental health needs during recruitment and employment processes.