AI Security Architect focusing on AI security and governance for Voya Financial's applications and projects. Leading initiatives in artificial intelligence and securing innovative technology solutions.
About the role
- Senior leader responsible for managing global Enterprise IT, Cybersecurity, and Compliance functions. Driving strategy and ensuring compliance with global standards in a high-growth technology environment.
Responsibilities
- Build and execute a comprehensive security, compliance, and enterprise IT strategy aligned with company objectives.
- Advise executive leadership on risk posture, emerging threats, and regulatory requirements.
- Oversee IT governance, asset management, endpoint strategy, identity management, and security-by-design standards.
- Lead corporate IT operations including helpdesk, SaaS management, access controls, device lifecycle, and employee support.
- Modernize the IT environment with automation, standardization, and cloud-first systems.
- Establish policies for acceptable use, asset management, remote workforce security, and incident reporting.
- Oversee onboarding/offboarding processes, MDM, SSO, and IAM across the entire organization.
- Own our global cybersecurity program covering cloud security, application security, network security, vulnerability management, and SOC operations.
- Architect and enforce zero-trust principles across users, services, and systems.
- Lead threat detection, incident response, forensics, and ongoing readiness exercises.
- Implement and manage security tools (SIEM, EDR, CSPM, WAF, IAM, DLP, etc.).
- Maintain ongoing compliance with PCI DSS, GDPR, CCPA, SOC 2, ISO 27001, and future regulatory frameworks.
- Serve as primary owner of audits, certifications, and external assessments.
- Lead enterprise-wide risk management, vendor reviews, data protection controls, and privacy governance.
- Maintain audit readiness and drive continuous improvement of the ISMS.
- Partner with Engineering, DevOps, Product, Legal, and Operations to embed security into architecture, SDLC, and infrastructure.
- Lead, mentor, and grow a team of IT, security, and compliance professionals.
- Build a company-wide culture of security awareness and accountability.
Requirements
- 10+ years of progressive experience in cybersecurity, enterprise IT, or information risk roles.
- 5+ years leading teams in a high-growth SaaS or global technology environment.
- Proven success owning PCI, GDPR, and CCPA programs end-to-end.
- Deep experience with cloud-native security (AWS preferred).
- Demonstrated leadership in incident response, vulnerability management, and compliance audits.
- Strong understanding of modern IT operations, identity systems, and SaaS ecosystems.
- Ability to translate complex security topics into clear, actionable guidance for executives and non-technical teams.
- Preferred Certifications: CISSP, CISM, CISA, CCSP, ISO 27001 Lead Implementer, AWS Security Specialty.
Benefits
- Medical, dental, vision, FSA, EAP, and more
- Equity
- 15 days PTO in year one, 22+ days after that, plus 10 paid holidays
- 401(k) eligibility from Day 1
- Tuition assistance, Udemy Learning access, development opportunities
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Senior Analyst for Third - Party Security at a leading law firm. Responsible for program execution and risk assessment regarding vendors and service providers.
Application Architecture Engineer responsible for defining software architecture frameworks and leading implementation teams. Driving innovation in developing robust and scalable applications at Schneider Electric.
Security Officer managing safety and security at Cromwell Hospital and Canary Wharf locations. Responding to security requests and maintaining logs while ensuring compliance with safety regulations.
Behavioral Health & Security Associate in Peoria providing care and oversight for patients with behavioral health needs. Ensuring a safe environment and effective support for patients and staff.
AI Security Engineer at Prologis focused on securing AI integrations and developing AI security controls. Collaborating with engineering and business teams to promote secure AI practices.
Project Coordinator managing security projects at The Missing Link, ensuring client satisfaction and project deliverables. Coordinating teams and maintaining timelines for project success in the IT field.
Information Security Specialist ensuring optimal protection of data and systems at University of Toronto. Implementing security platforms and best practices for data integrity and threat mitigation.
Loss Prevention Agent responsible for security and loss prevention in logistics facilities. Ensuring safety and protection of property, clients, employees, and guests within the workspace.
Analyst Relations Manager shaping market understanding of Upwind's innovative cloud and AI security platform. Leading relationships with industry analysts to enhance visibility, credibility, and category leadership.