Sr Principal AI Security Architect at Northern Trust

Chicago, Illinois, United States

Apply Now

Not SpecifiedCompensation

Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level

Full TimeJob Type

UnknownVisa

Financial ServicesIndustries

Requirements

10+ years in enterprise security architecture or engineering
Expertise in Microsoft security ecosystem
Strong scripting and query experience with PowerShell, KQL
Experience securing AI pipelines and plugin-based architectures
Proven leadership in AI-specific threat modeling and risk treatment
Familiarity with model lifecycle governance

Responsibilities

Define and enforce enterprise-wide AI security architecture patterns across first-party AI/LLM deployments, Microsoft Copilot and GitHub Copilot, Azure OpenAI and plugin architectures, and third-party managed AI platforms (e.g., Workday, ServiceNow, Solytics)
Ensure AI systems and plugins are securely integrated with Microsoft 365, Entra ID, Defender suite, Purview, and Azure services
Architect Model Context Protocol (MCP) patterns for safe containerized deployments, including secure pod-to-pod communication via microsegmentation, API gateway authentication and rate limiting, container image integrity validation, grounding data access policy enforcement, and centralized monitoring and logging for auditability
Develop and maintain enterprise-wide AI security policy frameworks
Partner with Data Protection, Legal, Procurement, and Business Units
Design and implement policy-as-code and workflow-based governance controls
Build and maintain AI-specific threat models
Design AI-aware detection and response strategies
Support red teaming, abuse case development, and adversarial testing
Enable seamless and secure integration of Microsoft and third-party AI platforms
Ensure data classification and DLP enforcement using Microsoft Purview
Ensure AI interactions respect network boundaries
Map AI-specific controls to CRI v2.1, NIST AI RMF, and OWASP Top 10 for LLMs
Enforce end-to-end controls across the AI lifecycle
Implement controls to protect confidentiality, integrity, and availability
Act as a recognized authority on AI security
Advise Security Leadership, Technology Leadership, and governance boards
Present AI security strategy and posture to stakeholders
Mentor security architects, engineers, and data scientists