AI Security Architect

Role Overview

This position is responsible for defining and managing the security architecture for AI and Generative AI implementations across Prudential. The role ensures that AI/ML platforms and AI-enabled applications are developed and operated securely at scale. It provides strategic leadership by establishing AI security architecture principles, blueprints, and control requirements to mitigate risk, facilitate responsible AI-driven transformation, and support global regulatory and audit compliance.

About Prudential

Prudential has been delivering trusted financial security for over 95 years to more than 15 million customers. Headquartered in London and Hong Kong, it ranks among the top three insurers in nine Asian markets with 600,000 agents and over 18,000 bank branches. Prudential targets exciting growth markets in Asia and Africa, aiming to expand its footprint in life insurance and asset management across a base of over 5 billion people.

Organizational Context

The role reports to the Enterprise Security Architecture and Innovation Department within Group Information Security and Privacy (GISP). This team develops policies, standards, frameworks, and controls to protect organizational assets, data, and IT infrastructure. It collaborates globally with Prudential's local business units, application owners, Global Technology Division, enterprise architects, and solution architects.

Key Responsibilities

• Define and regulate security architecture and control frameworks for AI/ML and Generative AI technologies, including AI platforms, large language models (LLMs), agentic AI, retrieval-augmented generation pipelines, multi-cloud platform (MCP), and model inference environments.
• Create AI security controls, reference architectures, and scalable design templates following enterprise policies, regulatory standards, and industry frameworks like NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, OWASP's Top 10 for LLMs, and AISVS.
• Embed AI-specific security requirements throughout the AI development lifecycle using AI threat modeling to address risks such as prompt injection, model poisoning and theft, sensitive data leaks, and insecure integrations.
• Serve as a subject matter authority on AI security architecture, offering strategic counsel to architects, developers, and business teams.
• Assess and adopt emerging AI security technologies such as AI disaster recovery, AI security posture management tools, AI/LLM gateways, and AI red-teaming software to enhance security and enable safe AI utilization.
• Perform security risk assessments on AI projects, models, and architecture adjustments, providing actionable mitigation advice.
• Collaborate with auditors, regulators, AI governance committees, data privacy units, and key stakeholders to ensure responsible AI deployment and compliance.
• Identify gaps in current AI security policies and controls, recommending effective updates.

Experience and Qualifications

• Over 10 years’ experience in IT security supporting large enterprises, with practical involvement in securing AI/ML or Generative AI platforms.
• Familiarity with major Cloud Service Providers (Azure, GCP, AWS, AliCloud) and their AI/ML services (e.g., Azure AI Foundry, Gemini Enterprise).
• In-depth knowledge of AI security threats and mitigation strategies, including OWASP Top 10 for LLMs and MITRE ATLAS, as well as foundational network, encryption, cloud, and application security.
• Proven leadership in managing security projects, particularly in AI security and AI governance initiatives.
• Experience in financial institutions is advantageous.
• Willingness to travel occasionally within Asia-Pacific for regional responsibilities.
• Preferred professional certifications include:
  • (ISC)² CISSP
  • SABSA, TOGAF
  • ISACA certifications such as CISM, CRISC, AAISM
  • AI security/governance certifications like GIAC AI Platform Security (GAIPS), ISO/IEC 42001 Lead Implementer
  • Cloud certifications emphasizing AI/ML and security specialties