AI Security Architecture- VP

We need to output HTML fragment with sections: About the role? Actually the posting includes "Who We Are Looking For" (intro), "Why this role is important to us", "What You Will Be Responsible For", "What We Value", "Education & Preferred Qualifications", "Additional Requirements", "Work Requirement", "Salary Range", "Benefits", "About State Street". We need to use

for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We must not repeat job title as heading. We need to include sections only when posting has real specific content. We need to preserve all substantive info. Remove boilerplate like EEO, legal, application instructions, cookie/navigation, duplicated lines, etc. Also remove Job ID etc. We need to map content to appropriate sections. We have: - Who We Are Looking For: intro description of role, reporting line, responsibilities overview. Could be "About the role". Use

About the role

then

with that content. - Why this role is important to us: could be part of About the role or separate? Could be "About the role" includes that. But we could also have a separate "Impact" but not in allowed headings. Allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need to fit content into those. Responsibilities: "What You Will Be Responsible For" ->

Responsibilities

with

• list. Requirements: maybe "Education & Preferred Qualifications" and "Additional Requirements". Could combine into Requirements section. Qualifications: maybe "Education & Preferred Qualifications" is qualifications. But we have both Requirements and Qualifications allowed. Could separate: Requirements = experience, certifications, tools; Qualifications = education, preferred qualifications. Or we could just have one. But we need to follow instruction: prefer a few substantive sections over many thin ones. So maybe combine education and experience into Qualifications, and put skills into Skills section. Let's see. We have "What We Value" which lists skills: deep technical expertise, practical understanding, ability to translate, experience leading, strong collaboration, execution-focused leadership, curiosity, adaptability. That's skills. So we can have

  Skills

  with list. Education & Preferred Qualifications: could be

  Qualifications

  with list. Additional Requirements: could be part of Requirements or Qualifications. Since we already have Qualifications, maybe Additional Requirements go under Requirements (like ability to coordinate across global teams, travel, hybrid work). But Work Requirement and Shift Timings also relate to Schedule. Salary Range is Pay. Benefits is Benefits. Thus sections: - About the role (intro + why important) - Responsibilities - Skills - Qualifications (education + preferred qualifications) - Requirements (experience, certifications, tools, additional requirements) - Benefits - Pay (Salary Range) - Schedule (Hybrid work requirement, shift timings) We must not include sections with placeholder or vague content. All have specific content. We need to preserve all substantive info. Let's extract. Intro: "Who We Are Looking For We are in Vice President, AI Security Architecture reporting directly to the Managing Director, AI Security and Data Protection. You will lead the design and oversight of secure architecture patterns, reference architectures, standards, and guardrails for artificial intelligence, machine learning, and generative AI solutions across the enterprise. You will partner with engineering, platform, product security, data, risk, and business teams to ensure AI capabilities are secure by design, responsibly implemented, and aligned with internal control and regulatory expectations." Why this role is important: "Global Cybersecurity protects State Street and its clients from the impact of cyber attacks by understanding cyber risk and mitigating it through a robust, continuously evolving cybersecurity program and control environment. Fusion & Security Operations provides real-time knowledge of current cyber threats to better prepare State Street for future threats. This role is critical to enabling secure AI adoption, protecting sensitive data, reducing emerging technology risk, and establishing scalable architecture practices that support innovation without compromising resilience, regulatory readiness, or client trust." Combine into About the role paragraph(s). Could be two paragraphs. Responsibilities list: bullet points from "What You Will Be Responsible For In this role, you will:" then list items. Let's extract each bullet: - Lead the design and implementation of secure architecture patterns for AI, machine learning, and generative AI systems, including data pipelines, model access, APIs, agents, retrieval-augmented generation, and AI-enabled applications. - Define and maintain enterprise AI security reference architectures, technical standards, guardrails, reusable patterns, and architecture decision criteria. - Lead architecture and design reviews for AI initiatives, ensuring security, privacy, resilience, and control requirements are incorporated early in the solution lifecycle. - Perform AI-focused threat modeling across models, data flows, platforms, integrations, and user interactions, addressing risks such as data leakage, prompt injection, insecure model access, supply chain vulnerabilities, model misuse, and excessive agency. - Translate identified risks into practical security requirements, mitigation strategies, compensating controls, and risk-based architecture decisions. - Partner with engineering, product security, platform, cloud, application, and data teams to embed AI security controls into software development, DevSecOps, model development, deployment, and monitoring workflows. - Develop validation criteria and repeatable assurance patterns for AI platforms, pipelines, models, third-party services, and emerging capabilities. - Provide architecture oversight for generative AI tools, internal AI services, developer productivity solutions, and business-led AI use cases. - Ensure AI security designs align with internal policies and applicable external standards and regulatory expectations, including NIST, ISO, and FFIEC concepts. - Support risk, audit, compliance, and incident management activities through clear documentation of architecture decisions, control designs, residual risks, and remediation actions. - Communicate technical risks, architecture options, and recommendations clearly to engineering teams, business stakeholders, governance forums, and senior leadership. - Mentor architects and security practitioners, promote internal knowledge sharing, and continuously improve AI security architecture practices as technologies and threats evolve. Now Skills from "What We Value": list: - Deep technical expertise in security architecture, secure design, application security, cloud security, product security, data protection, and modern engineering practices. - Practical understanding of AI and machine learning architectures, generative AI, model and data pipelines, APIs, cloud-native platforms, and AI security risk patterns. - Ability to translate complex technical and emerging risks into clear architecture requirements, control designs, implementation patterns, and executive decisions. - Experience leading architecture reviews, threat modeling, technical risk assessments, and secure-by-design programs in complex enterprise environments. - Strong collaboration and influencing skills across Security, Engineering, Technology, Data, Risk, Compliance, Audit, and business teams. - Execution-focused leadership with sound judgment, strong problem-solving skills, and a commitment to measurable risk reduction. - Curiosity, adaptability, and continuous learning in a rapidly evolving AI security landscape Now Qualifications (Education & Preferred Qualifications): - Degree required: Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline; advanced degree preferred. - Years of experience: 10+ years of progressive experience in cybersecurity, including significant experience in security architecture, application security, product security, cloud security, or security engineering. - Certifications required or preferred: CISSP, CCSP, CSSLP, cloud security, architecture, or comparable industry certifications preferred. - Knowledge of tools or technologies: Cloud-native architectures; AI and machine learning platforms; generative AI and large language model solutions; APIs; data pipelines; DevSecOps and CI/CD; threat modeling; security testing; identity and access management; data protection; logging, monitoring, and security automation. - Additional language requirements: N/A. (We should drop N/A as placeholder? It's not substantive; we can omit.) - Other qualifications: Experience securing enterprise-scale platforms and applications, working in regulated environments, establishing reusable architecture standards, and communicating technical risk to engineering and senior leadership audiences. Now Additional Requirements: - Additional requirements for this role include the ability to coordinate across global teams and time zones, support high-priority architecture, risk, audit, and incident activities as needed, and manage sensitive information in accordance with company requirements. - Travel may be required based on business needs. - Work Requirement Hybrid Work Requirement: Hybrid, subject to company and location-specific requirements. - Shift Timings: Standard business hours with flexibility to support global stakeholders and critical security, architecture, or regulatory needs. We need to map these to sections. We have Requirements section: could include years of experience, certifications, tools, additional requirements (coordinate global teams, travel, manage sensitive info). Could also include "Ability to coordinate across global teams and time zones, support high-priority architecture, risk, audit, and incident activities as needed, and manage sensitive information". Also travel. We have Schedule section: Hybrid work requirement, shift timings. Pay section: Salary Range $120,000 - $202,500 Annual plus note about location differences. Benefits section: description of benefits program. Now we need to ensure we don't include filler like "N/A". We'll omit that line. Also we need to remove duplicated lines, boilerplate like EEO, legal, application instructions, Job ID, etc. Also remove "About State Street" maybe? That's company description; is that substantive? It's about the company, not role-specific. The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." Does "About State Street" count as substantive? It's generic company info, but it's part of posting. However typical job postings include that; but we might consider it boilerplate? It's not about the role. The instruction says remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "About State Street" is not explicitly listed, but could be considered boilerplate? It's not legal/EEO. Might be considered company overview, which is often kept. However the instruction says "Prefer a few substantive sections over many thin ones." Including About State Street would add another section maybe not needed. The allowed headings do not include a generic company overview. So we likely should omit it, as it's not role-specific. The instruction says preserve ALL substantive information; but if we omit company overview, are we losing substantive? It's not about the role, but it's still info. However typical tasks in such prompts often remove company description. I'd lean to omit it to keep focus on role. Also the allowed headings don't have a place for it. So we will omit About State Street. Now we need to output only HTML fragment, no /, no markdown fences. We'll produce:

  About the role

  ... combined intro and why important ...

  Responsibilities

  • ...
  ...

  Skills

  ...

  Qualifications

  ...

  Requirements

  ...

  Benefits

  ...

  Pay

  ...

  Schedule

  ...

  We need to ensure we don't include empty sections. Now craft content. About the role paragraph(s): combine two paragraphs maybe as one

  with two sentences? Could be two

  but we can combine. Let's write:

  We are seeking a Vice President, AI Security Architecture reporting directly to the Managing Director, AI Security and Data Protection. You will lead the design and oversight of secure architecture patterns, reference architectures, standards, and guardrails for artificial intelligence, machine learning, and generative AI solutions across the enterprise, partnering with engineering, platform, product security, data, risk, and business teams to ensure AI capabilities are secure by design, responsibly implemented, and aligned with internal control and regulatory expectations.

  This role is critical to enabling secure AI adoption, protecting sensitive data, reducing emerging technology risk, and establishing scalable