Head of Security Architecture

Head of Security Architecture

Full-Time No working from home possible

At a Glance

  • Tasks: Lead the design and implementation of secure AI architectures for a global organisation.
  • Company: Join AXA XL, a leader in innovative risk solutions and inclusive culture.
  • Benefits: Enjoy competitive pay, flexible working, and comprehensive health benefits.
  • Other info: Be part of a diverse team committed to sustainability and ethical practices.
  • Why this job: Shape the future of AI security while making a real impact on global growth.
  • Qualifications: Expertise in cyber security, AI systems, and strong leadership skills required.

The Head of Security Architecture with deep expertise in AI systems to design, implement, and maintain secure architectures for enterprise security, artificial intelligence and machine learning initiatives across the organisation. This role will define technical security standards, reference architectures, and implementation frameworks that protect traditional IT environments and AI systems, models, data pipelines, and deployments throughout their life-cycle — from conception to production. The Head of Security Architecture will partner with stakeholders and internal teams to establish a comprehensive, forward-looking security strategy and architecture that enables organisational ambitions while managing AI-related security risks.

What you’ll be doing

  • Work with stakeholders and internal teams to define a comprehensive, forward-looking Security strategy, inclusive of AI Security and Architecture that supports the organisation's global growth ambitions, incorporating policies, standards, and control frameworks applicable across multiple jurisdictions.
  • Establish and evolve governance mechanisms that promote responsible, ethical, and compliant AI use worldwide, considering regional regulatory nuances and cultural sensitivities.
  • Integrate AI security requirements into security and enterprise architecture, software development life cycles, and model life-cycle management, ensuring consistency and agility across diverse operational regions.
  • Will be part of Security Strategy development and does require interaction with executive business leaders for a global organisation.
  • Architecture & Design:
    • Design enterprise-wide security architectures and reference implementations.
    • Establish secure AI development, training, and deployment pipelines.
    • Define AI & security data governance and access control frameworks for systems.
    • Create security-by-design principles for AI model development.
    • Design threat models specific to AI/ML systems and attack surfaces.
  • Technical Security Standards:
    • Develop and maintain security frameworks and best practices.
    • Create secure coding standards for ML engineers and data scientists.
    • Establish model validation, testing, and verification protocols.
    • Define encryption, authentication, and authorisation standards for systems.
    • Document security requirements and technical specifications.
  • Infrastructure & Systems:
    • Architect secure AI infrastructure (cloud, on-prem, hybrid).
    • Design model registry, versioning, and deployment systems with security controls.
    • Implement monitoring, logging, and anomaly detection for AI systems.
    • Oversee secure data pipelines and feature stores.
    • Design isolation and sandboxing for high-risk AI workloads.
  • Risk & Threat Mitigation:
    • Conduct threat modelling for AI systems (adversarial attacks, model poisoning, data poisoning).
    • Design defences against AI-specific vulnerabilities.
    • Implement model robustness testing and validation frameworks.
    • Create incident response architectures for AI security breaches.
    • Design recovery and rollback mechanisms for compromised models.
  • Vendor & Third-Party Management:
    • Evaluate and architect integrations with third-party AI platforms securely.
    • Define security requirements for AI vendors and SaaS providers.
    • Design secure APIs and interfaces for external AI model access.
    • Oversee security architecture of outsourced AI development.
  • Governance & Compliance:
    • Align security architecture with regulatory requirements (GDPR, AI Act, industry standards).
    • Design audit trails and compliance monitoring systems.
    • Document architecture decisions and security trade-offs.
    • Collaborate on responsible AI and ethical AI architecture considerations.
  • Team Leadership & Knowledge Sharing:
    • Lead AI security architecture reviews and design sessions.
    • Mentor security engineers and architects.
    • Present architecture recommendations to technical and executive stakeholders.
    • Build and maintain security architecture documentation.
    • Drive adoption of secure architecture patterns.

You will report to Chief Security Officer.

What you’ll bring

  • Substantial experience in cyber security, systems architecture, or infrastructure security.
  • Proven capabilities in designing and architecture large-scale systems.
  • Experience in hands-on and applied experience with AI/ML security architecture.
  • Deep technical knowledge of:
    • Machine learning systems and workflows.
    • AI/ML vulnerabilities and attack vectors (adversarial examples, model extraction, poisoning).
    • Cloud security and containerisation (Docker, Kubernetes).
    • Data security, encryption, and access controls.
    • API security and micro-services architecture.
  • Robust background in threat modelling and security architecture frameworks.
  • Experience with secure software development life-cycle (SSDLC).
  • Advanced degree in Computer Science, Cyber security, or related field (or equivalent).

Key Competencies

  • Executive judgement and credibility.
  • Global risk thinking and cultural agility.
  • Governance and control design.
  • Influencing and stakeholder management without direct authority.
  • Clear, compelling communication tailored for diverse audiences, including boards and regulators.
  • Balancing innovation with disciplined risk management on a global scale.

Preferred Skills

  • CISSP, CCSK, CISM, AAISM or similar security architecture certification.
  • Experience with MLOps/MLSecOps platforms.
  • Background in machine learning engineering or data science.
  • Experience with AI governance and responsible AI frameworks.
  • Knowledge of AI-specific security standards (NIST AI RMF, ISO/IEC 42001).
  • Experience in regulated industries (finance, healthcare, government).
  • Contributions to open-source security or AI security projects.
  • Speaking/publishing on AI security topics.

What we offer

  • Inclusion: AXA XL is committed to equal employment opportunity and will consider applicants regardless of gender, sexual orientation, age, ethnicity and origins, marital status, religion, disability, or any other protected characteristic.
  • Total Rewards: AXA XL’s Reward program is designed to take care of what matters most to you, covering the full picture of your health, wellbeing, lifestyle and financial security.
  • Sustainability: At AXA XL, Sustainability is integral to our business strategy.

Head of Security Architecture employer: 慨正橡扯

At 慨正橡扯, we pride ourselves on being an exceptional employer that champions innovation and collaboration in the field of Behavioral Economics and Retirement Research. Our hybrid working model not only offers flexibility but also nurtures a vibrant work culture where employees are encouraged to grow and develop their skills through meaningful projects and leadership opportunities. Join us in Europe, where your expertise will directly contribute to enhancing investor outcomes and shaping impactful business strategies.

Contact Details:

慨正橡扯 Recruitment Team

StudySmarter Expert Advice🤫

We think this is how you could land Head of Security Architecture

Get Involved in the Cybersecurity Community

Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!

Show Off Your Skills with Capture the Flag Competitions

Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including 慨正橡扯, love seeing candidates who actively engage in these challenges.

Tailor Your Online Presence

Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!

Apply Directly Through 慨正橡扯

Don’t forget to head straight to our website and check out any openings for cybersecurity roles at 慨正橡扯. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.

We think you need these skills to ace Head of Security Architecture

AI Security Architecture
Cyber Security
Systems Architecture
Infrastructure Security
Machine Learning Systems
Threat Modelling
Cloud Security

Some tips for your application 🫡

Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!

Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!

Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at 慨正橡扯 insight into your practical problem-solving abilities and makes your application memorable.

Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to 慨正橡扯 that you’re committed to staying ahead in the game.

How to prepare for a job interview at 慨正橡扯

Sharpen Your Technical Skills

For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.

Prepare for Scenario-Based Questions

Expect the interviewers at 慨正橡扯 to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.

Highlight Your Certifications

Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at 慨正橡扯.

Show Your Passion for Cybersecurity

Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.