Product Security Engineer building secure CIAM authentication services for Affirm’s pay - over - time platform. Developing Python/Kotlin APIs, MFA, identity integrations, and reliable account - access experiences.
About the role
- Senior AI security specialist strengthening governance, architecture, and risk controls at TD, a global financial institution. Advising executives and technology teams on secure AI adoption.
Responsibilities
- Lead development and implementation of AI security strategies, standards, policies and control expectations
- Provide technical leadership and expert consultation on technology controls, information security programs, policies, standards and incidents
- Advise business and technology partners on AI risk and control design
- Articulate control gaps, business impact, mitigation options and escalation needs
- Lead risk and control design assessments across AI applications, models, agents, third parties, infrastructure and supporting platforms
- Review vulnerabilities and control procedures to validate security and technology controls
- Oversee AI security governance, key risk reporting, control effectiveness metrics and remediation plans
- Lead governance forums and drive accountable outcomes across stakeholders
- Monitor AI threat trends, adversarial techniques, regulatory developments and industry practices
- Translate emerging developments into improvements to monitoring, prevention, detection, response and resilience
- Develop, provide or contribute to complex reporting, analysis and assessments at the functional or enterprise level
- Build relationships across business, technology and control functions
- Deliver executive-ready advice and awareness on complex AI risk
- Act as a primary technical expert working with technology partners and service/platform owners to integrate security components into enterprise architecture
Requirements
- University degree or equivalent relevant professional experience
- 10+ years of relevant experience in information security, technology risk, cloud security, cyber risk, enterprise security architecture or a related discipline
- Experience applying recognized AI risk and governance frameworks, such as the NIST AI Risk Management Framework, ISO/IEC 23894, ISO/IEC 42001, OWASP or MITRE guidance
- Demonstrated experience leading risk and control assessments for complex or high-risk technology initiatives and translating findings into practical mitigation and remediation plans
- Demonstrated knowledge of AI security and risk, including secure AI development, model or agent risks, validation, monitoring, explainability, robustness and adversarial threats
- Experience integrating AI security controls into enterprise architecture, technology platforms and third-party risk processes
- Ability to communicate complex security and AI risk concepts clearly to executives, technical teams, business partners and control functions
- Commitment to continuous learning and staying current with industry trends, frameworks, and best practices in AI and financial services
- Information security, technology risk or AI governance certification or accreditation preferred
- Experience in financial services or another highly regulated industry preferred
- Experience supporting incident response or remediation for AI-related security events preferred
Benefits
- Variable compensation
- Health and well-being benefits
- Savings and retirement programs
- Paid time off
- Banking benefits and discounts
- Career development
- Reward and recognition programs
- Regular career, development, and performance conversations
- Training programs
- Online learning platform
- Mentoring programs
- Training and onboarding sessions
- Workplace accommodations, including accessible meeting rooms and captioning for virtual interviews
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Staff Security Software Engineer securing Keycard’s agent identity and access infrastructure. Threat - modeling token exchange, delegation, cloud controls, and AI - agent authorization.
Senior Security Consultant leading integrated security system design and project delivery. Advising Canadian commercial, institutional, and government building clients.
Global cybersecurity leader defining strategy, risk governance, and security operations for Innocap’s managed alternative - investment platform. Leading worldwide teams and protecting regulated financial technology.
Principal Product Security Researcher leading threat research and security strategy at Chainguard, a provider of hardened open - source software builds. Influencing product roadmaps and industry security practices.
Principal Product Security Researcher leading threat research and product security strategy. Shaping secure, production - ready open - source software builds for Chainguard customers.
Principal Product Security Researcher shaping threat research and security strategy for Chainguard’s hardened open - source software. Influencing product roadmaps, mitigating supply - chain risks, and advancing industry security practices.
Endpoint security engineer designing and operating enterprise protection for TD, a major North American bank. Leading security platforms, technical initiatives, and a small engineering team.
Hybrid offensive and defensive security advisor protecting Desjardins systems, networks, and applications. Investigating incidents, assessing vulnerabilities, and recommending mitigation measures.
Cybersecurity adjunct faculty teaching CSIA 300 asynchronously for University of Maryland Global Campus. Mentoring adult learners and supporting their academic and professional growth.