Senior Information Security Architect – AI Security

About the role

ABA Bank is looking for a senior information security architect to lead the design and governance of security across its infrastructure, applications, cloud and AI platforms. The role focuses on establishing a robust security architecture, conducting threat modelling and ensuring safe AI adoption within the bank’s digital services.

Key responsibilities

• Define, maintain and communicate target security architecture, reference architectures, design patterns and standards across infrastructure, networks, applications, data, cloud and AI platforms.
• Provide independent security design reviews and formal assurance for new systems, major changes, integrations and third‑party services, recording residual risks with owners.
• Own the security architecture roadmap, align it with information security and IT strategies, and identify architectural debt for remediation.
• Lead structured threat modelling for internet‑facing, payment, core banking and AI‑enabled services using STRIDE, attack trees, MITRE ATT&CK and translate findings into business risk statements with treatment options.
• Define AI security architecture, control patterns and guardrails, assess AI use cases against OWASP LLM, NIST AI RMF, MITRE ATLAS and ISO/IEC 42001, and design mitigations for prompt injection, model poisoning, data leakage and other AI‑specific risks.
• Assure AI supply chain provenance, contractual data controls and advise on adversarial AI threats such as deep‑fake fraud.

Required profile

• Proven experience in security architecture, risk management, network and platform security within the financial services industry.
• Deep expertise in designing secure AI solutions and governing AI adoption.
• Strong knowledge of threat‑modelling methodologies and security frameworks.
• Ability to translate technical findings into business‑focused risk statements.

Required skills

• Security architecture design across infrastructure, cloud and AI platforms.
• Threat modelling (STRIDE, attack trees, MITRE ATT&CK).
• Risk assessment and mitigation planning.
• AI security governance (OWASP Top 10 for LLM, NIST AI RMF, MITRE ATLAS, ISO/IEC 42001).
• Network and platform security controls.
• Cloud security expertise.