AI Security Architect

About Citco:

Armed with superior services, smart people, and strong technology, we tackle our customers’ complicated challenges by developing sophisticated solutions driven directly by their demands. The result? Innovation that generates tangible value and makes a real difference for our clients and their companies.

About the Team and Business Line:

This position calls for an AI Security Architect with extensive experience in enterprise security architecture, artificial intelligence (AI), and secure solution design. As a key member of Citco's IT Security organization, the AI Security Architect is responsible for establishing the security architecture, governance, and technical standards required to enable the secure adoption of Artificial Intelligence (AI), Generative AI (GenAI), Machine Learning (ML), and intelligent automation technologies across the enterprise.

The AI Security Architect serves as the subject matter expert for AI security, ensuring AI-enabled solutions are designed, implemented, and operated in accordance with Citco's security policies, regulatory obligations, and risk management framework. This role partners with Enterprise Architecture, Data & AI teams, Application Development, Cloud Services, Risk, Legal, Compliance, and Security Operations to embed security, privacy, and responsible AI principles throughout the AI solution lifecycle.

This position is part of the IT Security group, which oversees global cybersecurity strategy, governance, architecture, engineering, and operational security capabilities across Citco's technology environment.

About the Role:

• You will develop and maintain the enterprise AI security strategy, architecture, and roadmap to support the secure adoption of AI technologies across the organization.
• Define security architecture principles, standards, and reference architectures for Artificial Intelligence, Generative AI, Machine Learning, and intelligent automation solutions.
• Establish secure design patterns for AI applications, model lifecycle management, data pipelines, AI infrastructure, APIs, and third-party AI services.
• Review AI initiatives and solution designs to ensure security, privacy, governance, and regulatory requirements are incorporated throughout the development lifecycle.
• Identify and assess AI-specific security risks, including prompt injection, model poisoning, adversarial attacks, insecure model supply chains, excessive agent permissions, sensitive data exposure, and unauthorized model access.
• Develop security requirements and control frameworks for AI platforms, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG) solutions, AI agents, and enterprise AI services.
• Collaborate with Enterprise Architecture, Data & AI, Cloud Engineering, Application Development, Legal, Compliance, and Risk teams to ensure AI solutions align with enterprise security and governance standards.
• Provide architectural guidance for AI infrastructure, identity integration, access controls, encryption, data protection, monitoring, and security logging.
• Evaluate emerging AI technologies, security capabilities, and industry best practices to support secure innovation and strategic technology adoption.
• Participate in architecture review boards, providing technical oversight and approval for AI-related technology initiatives.
• Support vendor risk assessments and security evaluations for AI platforms, AI-enabled software, and external AI service providers.
• Assist Security Operations and Incident Response teams during AI-related security incidents by providing architectural expertise and recommendations for containment and remediation.
• Develop and maintain enterprise standards for AI governance, secure AI development, model security, and responsible AI implementation.
• Promote security awareness by educating technology teams on secure AI design principles, AI risk management, and emerging AI threats.
• Stay current with advances in AI, cybersecurity, privacy regulations, and industry standards to continuously improve Citco's AI security capabilities.

About You:

• You must have 8+ years of experience in information security, security architecture, cloud security, application security, or enterprise architecture, including experience supporting AI or advanced analytics initiatives.
• Demonstrated experience designing secure enterprise architectures across cloud, application, identity, data, and infrastructure security domains.
• Strong understanding of Artificial Intelligence, Generative AI, Machine Learning, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), AI agents, and modern AI development practices.
• Experience identifying and mitigating AI-specific security risks, including adversarial machine learning, prompt injection, model poisoning, data leakage, model governance, and AI supply chain security.
• Knowledge of secure software development practices, API security, cloud-native architectures, identity and access management, encryption, and data protection principles.
• Experience developing enterprise security standards, reference architectures, governance frameworks, and technology roadmaps.
• Familiarity with AI governance, responsible AI principles, model lifecycle management, and emerging regulatory requirements related to AI.
• Knowledge of industry frameworks and standards such as the NIST AI Risk Management Framework (AI RMF), NIST Cybersecurity Framework, ISO/IEC 27001, ISO/IEC 42001, CIS Controls, OWASP Top 10 for LLM Applications, and Zero Trust Architecture principles.
• Excellent analytical, strategic thinking, and problem-solving skills with the ability to balance innovation, business objectives, security requirements, and regulatory compliance.
• Strong verbal and written communication skills with the ability to present complex AI security concepts to both technical and executive audiences.
• Demonstrated ability to influence architectural decisions and collaborate effectively across technology, security, legal, risk, compliance, and business teams.
• Preferred certifications include CISSP, Certified Cloud Security Professional (CCSP), Certified Information Privacy Professional (CIPP), Microsoft Cybersecurity Architect Expert, SABSA, TOGAF, Certified AI Security certifications, or equivalent industry credentials.

Salary Range: CAD $135,000 - CAD $175,000

• This posting is for an existing vacancy.

Our Benefits

Your well-being is of paramount importance to us, and central to our success. We provide a range of benefits, training and education support, and flexible working arrangements to help you achieve success in your career while balancing personal needs. Ask us about specific benefits in your location.

We embrace diversity, prioritizing the hiring of people from diverse backgrounds. Our inclusive culture is a source of pride and strength, fostering innovation and mutual respect.

Citco welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection.