Sr. Information Security Architect – AI & Cloud Security

Bank of America • Washington, DC

6d • Onsite

About The Position

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day. Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates’ physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve. Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations. At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us! The Sr. Information Security Architect – AI & Cloud Security is a senior member of the BISO Secure Solutions Design team responsible for defining secure architecture patterns, assessing emerging AI/ML solutions, and ensuring alignment with Global Information Security (GIS) policies and enterprise architecture strategies. This role provides deep technical expertise in security design, risk evaluation, and threat modeling for both traditional systems and modern AI/Generative AI workloads. This job is responsible for defining secure solution intent, evaluating system impacts, performing technical architecture assessments, and translating complex requirements into actionable controls across cloud, data, and application environments. You will partner closely with technology leaders, product teams, developers, and enterprise architects to ensure security is embedded into early design and that Generative AI systems are deployed in a resilient, safe, and compliant manner. The ideal candidate brings broad architecture experience, hands on technical depth, strong threat modeling skills, and demonstrated expertise securing AI, ML, and LLM-based systems.

Requirements

• 8+ years of experience in information security or enterprise architecture, with recent focus on AI/ML or Generative AI security.
• Proven experience performing secure architecture assessments, design reviews, and threat models for complex, integrated systems.
• Strong understanding of Generative AI, LLM risk, and security frameworks (MITRE ATLAS, OWASP LLM Top 10, NIST AI RMF).
• Broad experience across cloud platforms (AWS), identity, key management, secrets management, networking, containers, and API security.
• Expertise in interpreting and applying internal security policies, standards, and controls.
• Strong communication skills with the ability to convey complex technical concepts to technical and non technical audiences, including senior leadership.
• Demonstrated ability to drive decisions, collaborate across teams, and balance risk vs. business needs.
• Hands-on experience preparing technical diagrams and threat models.

Nice To Haves

• Experience with advanced developer tools such as GitHub Copilot, Microsoft Copilot Studio, or similar AI coding assistants.
• Certifications such as CISSP, CISM, CCSP, CCSK, CRISC, or cloud architecture/security certifications.
• Familiarity with agile methodologies, DevOps practices, CI/CD pipelines, and developer experience platforms.
• Experience in financial services or other regulated industries.

Responsibilities

• Security Architecture & Solution Design
• AI/ML Security, Threat Modeling & Risk Assessments
• Collaboration & Governance

Benefits

• This role is eligible to participate in the annual discretionary plan.
• Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and/or group; and the overall success of the Company.
• This role is currently benefits eligible.
• We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed