AI Security Architect

Why we are hiring

We need one senior AI Security Architect who can help a client use ChatGPT, Claude,

Gemini and AI agents safely, without leaking sensitive data or breaking compliance. This

is a security role first and an AI role second — not a regular AI/ML developer hire.

The client is a healthcare-linked enterprise at the very start of its AI journey. Its employees already use

public AI tools, and leadership has no clear view of what data is going into them. They have asked us

for a partner who can assess the risks, design the controls and set up governance. They are also talking

to other vendors, so the strength of the person we put forward matters.

In plain language, the client is worried about five things:

Client concern What it means in simple terms

PHI / PII / PCI exposure Staff may paste patient health data, personal details or card data into

ChatGPT or Claude on personal accounts.

Shadow AI People use AI tools IT does not know about, so nobody can see or control

what is shared.

Compliance gaps They need HIPAA (including BAA agreements with AI vendors), audit logs and

clean documentation, especially during an M&A (merger/acquisition).

No governance yet There are no AI policies, approved-tool lists, risk reviews or owners in place.

AI-specific attacks Prompt injection, data poisoning, AI-made phishing and deepfakes, misuse

of AI agents, compromised models, and wrong AI answers driving business

decisions.

Why seniority matters

The person we hire will usually be the first face of BigStep to this client, so they must lead discovery

conversations, not just take instructions.

The one question HR should keep in mind

Not “Does this person know AI?” but “Can this person design and put in place controls that let a

company use AI safely — protecting sensitive data, stopping attacks, meeting compliance and

controlling AI agents?”

AI SECURITY ARCHITECT · HR BRIEF

www.bigsteptech.com 03

The role at a glance

Item Requirement

Job title AI Security Architect / GenAI Security Lead (alternative: Lead AI

Security & Governance Architect)

Seniority Senior individual leader; first hire who later guides other engineers

Total experience 7–12 years

Cybersecurity / security

architecture

5+ years

Hands-on GenAI / LLM work 2–4+ years

Strong plus Work with regulated or sensitive data (healthcare, banking,

insurance)

Client-facing Must run discovery workshops and present to senior client

stakeholders

Best backgrounds to source from (strongest first)

1 Cybersecurity Architect who has moved into GenAI / LLM security

2 Cloud Security Architect with GenAI project experience

3 Application or Product Security Engineer with LLM security work

4 DevSecOps / Security Engineer with practical GenAI experience

5 AI/ML Engineer who has moved into cybersecurity and AI security

Do not shortlist on these titles alone

Data Scientist, Data Analyst, Prompt Engineer, generic AI/ML Developer, generic Full Stack

Developer, generic Cybersecurity Analyst (SOC/L1). They may have useful skills, but rarely the full

mix of security architecture, GenAI security and governance this client needs.