AI Security Architect

This role exists to define and govern security architecture for AI and Generative AI adoption across Prudential, ensuring AI/ML platforms, and AI-enabled applications are designed, built, and operated securely and at scale. It provides strategic security leadership by establishing AI security architecture principles, blueprints, and control requirements that reduce risk, enable responsible AI-driven business transformation, and support regulatory and audit readiness globally.

Prudential has been providing familiar, trusted financial security to our 15 million-plus customers for 95 years. Today, we are headquartered in London and Hong Kong, ranking top three in nine Asian markets through 600,000 agents and over 18,000 bank branches. Prudential is focused on opportunities in the most exciting growth markets in Asia and Africa. With access to over 5 billion people, we are investing in broadening our presence in the life and asset management markets.

Prudential Enterprise Security Architecture and Innovation Department is part of the Group Information Security and Privacy (GISP), which typically focuses on establishing a comprehensive policy, standard, framework and controls to safeguard an organization’s assets, data and IT Infrastructure.

GISP Enterprise Security Architecture and Innovation works in conjunction with different Prudential LBU businesses and application owner, Global Technology Division, Enterprise Architect and solution architect across the globe.

This position will cover Asia, Africa and United Kingdom regions, working within GISP Enterprise Security Architecture and Innovation to define the security architecture principles, architecture blueprints, explore and adopt emerging security technologies, with a primary focus on Cloud and Generative AI security.

Responsibilities:

• Define and govern security architecture and control frameworks for AI/ML and Generative AI solutions, covering AI platforms, LLMs, agentic AI, RAG pipelines, MCP and model inference environments
• Develop AI security controls, reference architectures, and reusable design patterns aligned with enterprise standards, regulatory expectations, and industry frameworks such as NIST AI RMF, ISO/IEC 42001, MITRE ATLAS, and OWASP Top 10 for LLM Applications, OWASP AISVS
• Define and embed AI-specific security requirements and controls across the AI solution lifecycle based on AI threat modelling, addressing risks such as prompt injection, model poisoning, model theft, sensitive data leakage, and insecure agent/tool integrations
• Serve as a trusted subject matter expert in AI security architecture, providing strategic guidance to solution architects, developers, and business stakeholders.
• Evaluate emerging AI security technologies such as AI DR, AI security posture management (AI-SPM), AI/LLM Gateway, and AI red-teaming tools to strengthen the organization’s security posture and enable secure adoption of AI capabilities.
• Conduct security risk assessments on AI use cases, models, and architecture changes, and provide clear, actionable recommendations to mitigate AI-related risk.
• Partner with internal and external auditors, regulators, AI governance and data privacy teams, and key business stakeholders to support responsible AI adoption, compliance, and Prudential business objectives.
• Identify gaps in existing AI security controls, policies and workflows, and propose practical changes.

Requirements:

• More than 10 years of experience in supporting large organization with a focus on IT security, including hands-on experience securing AI/ML or Generative AI solutions.
• Familiar with dominant Cloud Service Providers’ technologies, such as Azure/GCP/AWS/AliCloud, and their AI/ML services (e.g. Azure AI Foundry, Gemini Enterprise…)
• Deep understanding of AI security threats and controls (e.g. OWASP Top 10 for LLM Applications, MITRE ATLAS), in addition to network, encryption, cloud and application security, is mandatory.
• Experienced in leading, driving and completing security projects, including AI security or AI governance initiatives.
• Past experiences with financial institutions are helpful
• Occasional traveling within APAC is expected due to regional duties
• Desired professional certifications:
• (ISC)2 CISSP
• SABSA, TOGAF
• ISACA CISM, CRISC, AAISM
• AI security and governance related certifications, e.g. GIAC AI Platform Security (GAIPS), ISO/IEC 42001 Lead Implementer.
• Cloud certifications with AI/ML and Security as specialty.