AI Security Architecture and Risk, Sr Advisor

- Help lead the enterprise AI security reference architecture - partnering with Cybersecurity Architecture and the AI Center of Excellence to define approved patterns and secure defaults for AI and agentic workloads, and to evaluate incoming designs against them. - Help build and steward the AI risk-assessment framework - a multi-factor risk-tiering model that routes initiatives into delivery lanes (Standard, Elevated Risk, Experimentation) with clear, auditable criteria for rapid, consistent decisions at scale. - Define the control requirements and thresholds that AI protection tooling enforces - guardrail thresholds for hallucination, PII/PHI exposure, prompt injection, and toxicity, plus data-access policy - and bring security leadership to the build-vs-buy strategy for that layer (e.g., Arize, Fiddler, Varonis, or equivalent). - Develop and maintain STRIDE, MAESTRO, and MITRE ATLAS threat models for new AI system patterns, and contribute the Architecture Decision Records that keep the program defensible to internal auditors and regulators. - Represent Cyber's AI security perspective in AI Center of Excellence governance, and help translate design decisions into platform-enforceable policy and guardrails. - Evaluate emerging agentic AI frameworks (multi-agent orchestration, LLM tool-calling, autonomous workflows) for architectural risk and help define secure defaults with partner teams before they reach production. - Lay the groundwork for a future automation layer by designing controls and decision logic so they can be progressively operated by AI agents as the program matures. - Responsibilities listed are not intended to be all-inclusive and may be modified as necessary.

- 10+ years in security architecture, with a focus on cloud-native, AI/ML, or platform security domains. - Hands-on proficiency with AI risk frameworks: NIST AI RMF, MITRE ATLAS, OWASP LLM Top 10, and ISO/IEC 42001, MAESTRO. - Demonstrated experience designing risk-classification or governance models that balance security assurance against delivery speed. - Experience with policy-as-code tooling (Sentinel) and translating security policy into platform-enforceable controls. - Familiarity with the commercial AI protection landscape - observability, guardrails, and data security posture management - sufficient to make credible build-vs-buy and tooling recommendations. - A track record of leading through influence across organizational boundaries, building alignment with governance, platform, and business teams to deliver shared outcomes. - Strong technical communication skills; proven ability to present architecture and risk positions to SVP and C-suite audiences. - Bachelor's degree in Computer Science, Cybersecurity, or a related field, and/or equivalent work experience.

- Experience in financial services or other regulated industries with AI governance under frameworks such as the EU AI Act, ISO/IEC 42001, or model risk guidance such as SR 11-7. - Hands-on experience evaluating LLM-based agent orchestration systems (LangGraph, AutoGen, CrewAI, or equivalent) in a security or governance context. - Experience helping shape cross-functional operating models as organizations scale new technology capabilities. - Certification in CISSP, CISM, or equivalent; advanced credentials in AI, cloud, or zero trust security. - Proven experience contributing to enterprise-level threat modeling programs with patterns adopted by engineering teams.

- This role is on-site Monday through Friday. Fiserv considers in-person collaboration to be an essential part of this role as in-person office experiences help you with your overall onboarding experience and leads to stronger productivity.

- Approximately 10% travel off-site or to other office locations is expected.

- You must currently possess valid and unrestricted U.S. work authorization to be considered for this role. Individuals with temporary visas including, but not limited to, F-1 (OPT, CPT, STEM), H-1B, H-2, or TN, or any candidate requiring sponsorship, now or in the future, will not be considered.

These pay ranges apply to employees in Maryland. Pay ranges for employees in other states may differ. Certain Positions are Commissions eligible.