Data Security Architect (DLP and AI Security)

Role: Data Security Architect with DLP and Security for AI

Location: New York, NY 10017 (Onsite)

Primary Skill

• Data Security

Experience in

• Data Classification, DLP solution.

Role

• Owner of Data Security Program

Mandatory Tools

• Microsoft Purview & Concentric AI

Tools Good to have

• Varonis Data Security & DSPM.

AI experience is required. (Mainly Security for AI).

Key Responsibilities

Strategic & Leadership

• Serve as the CISO’s principal technical advisor on cybersecurity architecture, engineering strategy, and emerging technology risks.
• Drive the execution of architectural and engineering objectives within the cybersecurity program, ensuring alignment with the CISO’s overall strategy and governance framework.
• Lead Cybersecurity Technology Build (CTB) initiatives, identifying opportunities to modernize, automate, and integrate security capabilities across platforms.
• Translate complex security architecture requirements into actionable roadmaps that balance business priorities, risk tolerance, and regulatory expectations.
• Contribute to shaping the cybersecurity technology roadmap, evaluating innovative solutions through lab testing and strategic vendor partnerships.

Architectural & Technical

• Define and maintain cybersecurity architectural blueprints, ensuring alignment across applications, infrastructure, cloud, and data domains.
• Conduct architecture design reviews across applications, infrastructure, and cloud domains to ensure adherence to corporate policies, technical standards and security best practices.
• Evaluate, pilot, and integrate emerging security technologies—including AI/ML security controls, continuous controls monitoring solutions, and Zero Trust frameworks.
• Develop and maintain enterprise security architecture patterns and reference models, consistent with NIST CSF, ISO 27001, and MITRE ATT&CK frameworks.
• Oversee threat modeling, security assessments, and control design for major technology initiatives.
• Guide engineering teams in implementing secure configurations, hardening standards, and automated control validations to embed security-by-design principles across the enterprise.

Qualifications and Experience

• Education: Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or a related field.
• Experience: 10–15 years of progressive experience in cybersecurity, with at least 10 years leading security architecture and engineering functions in complex enterprise environments.
• Certifications: CISSP, CCSP, CISM, or relevant cloud security and architecture certifications preferred.

Technical Expertise

• Proven leadership in hybrid environments (on-premises + Azure Cloud).
• Deep understanding of application, infrastructure, and cloud security architecture.
• Experience in AI/ML security, automation, continuous controls monitoring, Zero Trust, Identity and Access Management (IAM, PIM, MFA, SSO), and data protection frameworks.
• Proficiency with enterprise cybersecurity platforms such as Endpoint Protection Platforms (e.g., CrowdStrike, SentinelOne, Microsoft Defender), SIEM’s (e.g., Splunk, CrowdStrike Next-Gen SIEM, Microsoft Sentinel), and deception technologies.
• Proficiency with DevSecOps integration, infrastructure-as-code security, and automated compliance tooling.
• Experience with Cyber Threat Intelligence and Threat Hunting frameworks, processes, and platforms.
• Hands-on familiarity with SIEM, EDR/XDR, DLP, PKI, and vulnerability management solutions.
• Strong understanding of industry standards and frameworks (NIST, ISO 27001, CIS Controls).
• Experience working with global teams and managing cybersecurity initiatives across multiple regions and time zones.