Sr Security Architecture Manager

What You'll Do:

Secure AI Architecture: Design and implement secure architectural solutions for AI/ML pipelines, large language models (LLMs), and automated decision systems.

Risk & Threat Modeling: Conduct security assessments and risk analyses specifically targeting AI-related threats such as prompt injection, model inversion, and data poisoning.

AI Governance & Standards : Develop and maintain security standards and policies tailored to AI development, including data provenance and model integrity.

Expert Guidance: Provide recommendations on AI security best practices to data science, DevOps, and business leadership teams. Technology Evaluation: Evaluate and recommend emerging security technologies, such as AI-driven SIEM, automated Red Teaming tools, and privacy-enhancing technologies.

Regulatory Compliance: Collaborate with legal teams to ensure AI deployments adhere to global regulations like the EU AI Act, GDPR, and HIPAA.

Vendor Assessment: Participate in security reviews of third-party AI service providers and foundational model creators.

Auditing & Compliance : Manage security assessments for AI environments, aligning with frameworks like ISO 42001 (AI Management System) and SOC2.

Documentation: Create high-quality technical documentation and data flow diagrams (DFDs) illustrating the movement of sensitive data through AI models.

Mentorship: Mentor junior security professionals and data scientists on the nuances of AI safety and security.

What You Will Bring to Coupa:

Degree: Bachelor’s degree in Computer Science, Data Science, or Information Security; Master’s degree preferred.

Experience: Minimum of 10 years in information security, with at least 5 years in security architecture and significant experience securing high-scale data or AI environments.

Frameworks: Deep understanding of NIST AI Risk Management Framework, OWASP Top 10 for LLMs, and ISO 27001.

Cloud & Infrastructure: Proficiency in designing secure AI architectures on cloud platforms like AWS, Azure, and GCP.

AI Security: Knowledge of secure coding for AI, model monitoring, and defensive techniques against adversarial attacks. Experience with Anthropic Claude, Google Gemini, and Azure OpenAI/ChatGPT is a plus.

Identity & Privacy: Experience with IAM for automated agents and privacy-enhancing technologies (e.g., differential privacy, homomorphic encryption).

Traditional Security: Mastery of firewalls, IDPS, SIEM, and endpoint security within hybrid environments.