Who we are looking for

The Managing Director, Security Architect is a senior leadership role responsible for defining and leading the firm's horizontal security architecture across AI Security, Data Protection, Cryptography, and Post-Quantum Cryptography (PQC). Reporting to the SVP, Data & AI Security, this leader ensures that architecture standards, controls, and secure-by-design patterns are coherent, consistent, and mutually reinforcing across all four disciplines. 

Why this role is important to us

This role exists to connect and elevate what would otherwise be siloed domains. The Managing Director will set a unifying architectural vision, establish shared standards and reference designs, and drive the enterprise toward a defensible, forward-looking security posture that spans data, models, keys, and cryptographic systems. The leader balances long-range strategy — including the firm's PQC transition — with the practical delivery of controls embedded into engineering workflows. 

The successful candidate is a recognized architecture leader with deep, credible expertise across multiple security domains, the executive presence to influence senior technology and business leaders, and a proven ability to translate complex technical risk into actionable decisions. They will lead a team of domain architects and act as a force multiplier across the broader security and engineering organization. 

What you will be responsible for

Horizontal Security Architecture & Strategy 

• Define and steward a unified, enterprise-wide security architecture spanning AI Security, Data Protection, Cryptography, and PQC. 

• Establish shared architecture standards, guardrails, and reference designs that remain consistent across domains while addressing domain-specific risk. 

• Ensure architectural decisions in one discipline reinforce the others (e.g., data protection controls that account for cryptographic agility and AI data exposure). 

• Set the multi-year architectural roadmap and align it with business priorities, regulatory expectations, and the firm's technology transformation. 

Cryptography & Post-Quantum Readiness 

• Lead the enterprise cryptographic architecture, including encryption, key management, secrets management, and machine identity. 

• Own the firm's Post-Quantum Cryptography (PQC) strategy and transition roadmap, driving cryptographic agility and inventory (CBOM) across the environment. 

• Establish standards for algorithm selection, key lifecycle, and crypto-agile design that support long-lived data protection. 

• Partner with Infrastructure and Platform teams to modernize cryptographic hygiene and reduce operational risk. 

AI Security Architecture 

• Set enterprise AI security architecture direction, including secure-by-default patterns for AI platforms, GenAI tooling, and AI agents. 

• Ensure AI threat modeling and controls (prompt injection, model inversion, data poisoning, adversarial AI) are integrated with data protection and cryptographic standards. 

• Guide the AI Security Architecture and Engineering teams to deliver coherent, defensible AI controls at scale. 

Data Protection Architecture 

• Define architecture patterns for data discovery, classification, DLP, access governance, and automated protection controls. 

• Ensure data protection controls operate consistently across on-premises, cloud, SaaS, and AI environments. 

• Align data-centric controls with cryptographic and AI security standards to protect sensitive data throughout its lifecycle. 

Secure Delivery & Enablement 

• Integrate security architecture into DevSecOps pipelines through paved-road platforms, automation, and policy-as-code. 

• Enable secure adoption of AI, data, and cryptographic capabilities with minimal friction for engineering and business partners. 

• Establish reusable, secure-by-default patterns that scale across product teams. 

Regulatory, Audit & Operational Excellence 

• Ensure architecture standards align with regulatory expectations (FFIEC, NIST, ISO, NYDFS, GDPR, SEC). 

• Serve as a credible technical voice in regulatory, audit, and client engagements across all four domains. 

• Drive data-driven architecture decisions using metrics on coverage, risk concentration, and control effectiveness. 

Executive Engagement & Team Leadership 

• Serve as a trusted technical advisor to the SVP, Data & AI Security, and to CISO, CIO, and architecture leadership. 

• Deliver concise executive briefings on cross-domain security posture, emerging risks, and architectural tradeoffs. 

• Build and lead a high-performing team of domain architects across AI, Data, and Cryptography. 

• Act as a multiplier for security engineering and platform teams through coaching and architectural leadership.