Job Description -

Position                                          :         Senior AI Security Technical Architect

Location                                         :         St. Louis, MO | Hybrid - need them to be local

Duration                                        :          12 months

Interview                                     :      Video

Client Note:

• will go a few $$$ more for a perfect fit - CISSP with 10 yrs exp will command higher
• Skills Needed: AI + Cybersecurity
• FYI: There will be 2 of these roles
• Must have managers references with LI profile

Senior AI Security Technical Architect

Capco is seeking a Senior AI Security Technical Architect to help define and advance an enterprise AI security strategy, ensuring artificial intelligence (AI) and generative AI (GenAI) capabilities are designed, deployed, and operated in a secure, compliant, and responsible manner. This role aligns business objectives, technology strategy, and security architecture to enable AI innovation with appropriate guardrails.

The Senior AI Security Technical Architect will establish standards, patterns, and governance across multiple AI usage models, including third-party SaaS AI solutions, internally developed AI/ML platforms, and emerging agentic and autonomous AI systems. This role ensures AI security practices are grounded in industry frameworks such as the NIST AI Risk Management Framework (AI RMF) and MITRE ATLAS, enabling proactive identification, communication, and mitigation of AI-related risks while supporting broader digital transformation, cloud adoption, and regulatory compliance.

What You’ll Do

• Own and evolve the enterprise AI security architecture and strategy, aligning business goals, technology platforms, and risk management practices.

• Define secure-by-design patterns and standards for AI/ML systems.

• Establish and maintain AI-specific security artifacts.

• Ensure consistent adoption of frameworks such as NIST AI RMF, MITRE ATLAS, CIS, and ISO 27001 across AI initiatives.

• Establish architectural governance and enforce adherence to AI security standards across product teams and platforms.

• Influence AI design decisions early in the lifecycle to reduce downstream risk and rework.

• Partner with enterprise stakeholders to balance innovation speed with risk tolerance and regulatory requirements.

• Evaluate AI frameworks, agents, vector databases, and third-party AI platforms for security posture and enterprise readiness.

• Recommend and rationalize AI security tooling as part of the broader enterprise security strategy.

• Monitor emerging AI threats, regulatory guidance, and industry best practices to inform security strategy and standards.

What Experience You’ll Need

• Bachelor’s degree in Computer Science, Engineering, or related field, or equivalent practical experience.

• 8–12+ years of experience in cybersecurity engineering or architecture within a complex enterprise environment.

• 2–4+ years of hands-on experience securing or reviewing AI/ML systems and platforms.

• Strong understanding of:

• LLM architectures, embeddings, and Retrieval-Augmented Generation (RAG) patterns
• End-to-end ML pipelines (training - validation - deployment - inference)
• AI model supply chain risks (model registries, containers, dependencies, open-source components)
• Zero Trust and identity-centric security models
• Cloud security across Azure, AWS, and GCP

• Proven ability to influence architecture decisions and lead cross-functional enterprise initiatives.

• Excellent communication skills with the ability to engage senior technical and business stakeholders.

What Could Set You Apart

• Security certifications such as CISSP, CISM, CCSP, or SANS certifications.

• Experience contributing to responsible AI practices, explainability, or bias mitigation initiatives.

• Experience securing AI platforms in regulated industries, particularly financial services.

• Background in encryption, cryptographic agility, or post-quantum readiness.

• Demonstrated experience in incident response and enterprise risk management.

• Understanding of regulatory requirements such as NYDFS Cybersecurity Regulations and FINRA Regulations