Vice President, AI Product Security

Thomson Reuters•Eagan, MN

1d•Hybrid

About The Position

In this opportunity as Vice President, AI Product Security, you will partner directly with product and engineering teams to embed security across the full AI stack — including AI experiences, agents, agent harnesses, underlying models, and context sources such as MCP — rather than treating the model in isolation. You will set the technical bar for AI-specific risk and cybersecurity requirements, holding engineering roadmaps to it before launch, not after. Serve as the security authority engineering teams come to for architecture and control decisions, resolving trade-offs without stalling delivery. Build the paved-road patterns and repeatable review frameworks that let engineering ship new AI experiences and agents fast, inside a risk tolerance you define with the CISO. Equip Customer Trust, Product and Go-to-Market teams to sell with security as a differentiator, not a caveat — explaining, with technical credibility, how Thomson Reuters builds secure, fiduciary-grade AI solutions centered on trust. Stand in front of customer executives and security leaders as the technical voice behind how Thomson Reuters secures its AI, and defend that posture under scrutiny. Assist in the build-out of trust artifacts, sales enablement materials, and security processes that meet customer requirements. Support customers directly in solutioning, adopting, and implementing AI in line with their own risk management strategies. Facilitate a technical relationship with the AI security engineering and architecture team, as well as AI red-team to leverage security reviews and adversarial-testing capabilities to evaluate the risk of models as well as MCP-connected tools against emerging threat patterns such as tool-privilege escalation, prompt injection, etc. Set requirements for evaluating and monitoring third-party and vendor-supplied models and AI services — provenance, ongoing risk assessment, and contractual security terms — applying the same rigor used for systems built in-house.

Requirements

12+ years in cybersecurity or product security, including senior leadership inside complex, SaaS-based technology organizations
Proven experience designing, developing, or securing AI solutions
Business solution architecture experience: the ability to read a product's technical design and turn security risk into concrete engineering requirements
A strong grasp of risk management, including how to identify and mitigate cybersecurity risk specific to AI models and capabilities
Understand and be able to apply best practice frameworks such as MITRE Atlas, OWASP Top 10 for LLMs, NIST AI RMF and others
Exceptional communication skills — able to translate deep technical concepts for non-technical buyers, procurement, and business leaders without diluting the substance
Comfort operating in ambiguity, building structure where none exists yet
A track record of driving decisions through influence, not authority — engaging senior leaders across technical and product organizations

Responsibilities

Partner directly with product and engineering teams to embed security across the full AI stack — including AI experiences, agents, agent harnesses, underlying models, and context sources such as MCP — rather than treating the model in isolation
Set the technical bar for AI-specific risk and cybersecurity requirements, holding engineering roadmaps to it before launch, not after
Serve as the security authority engineering teams come to for architecture and control decisions, resolving trade-offs without stalling delivery
Build the paved-road patterns and repeatable review frameworks that let engineering ship new AI experiences and agents fast, inside a risk tolerance you define with the CISO
Equip Customer Trust, Product and Go-to-Market teams to sell with security as a differentiator, not a caveat — explaining, with technical credibility, how Thomson Reuters builds secure, fiduciary-grade AI solutions centered on trust
Stand in front of customer executives and security leaders as the technical voice behind how Thomson Reuters secures its AI, and defend that posture under scrutiny
Assist in the build-out of trust artifacts, sales enablement materials, and security processes that meet customer requirements
Support customers directly in solutioning, adopting, and implementing AI in line with their own risk management strategies
Facilitate a technical relationship with the AI security engineering and architecture team, as well as AI red-team to leverage security reviews and adversarial-testing capabilities to evaluate the risk of models as well as MCP-connected tools against emerging threat patterns such as tool-privilege escalation, prompt injection, etc.
Set requirements for evaluating and monitoring third-party and vendor-supplied models and AI services — provenance, ongoing risk assessment, and contractual security terms — applying the same rigor used for systems built in-house

Benefits

Hybrid Work Model
Flexibility & Work-Life Balance
Work from anywhere for up to 8 weeks per year
Career Development and Growth
Grow My Way programming
Industry Competitive Benefits
Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Globally recognized, award-winning reputation for inclusion and belonging, flexibility, work-life balance, and more
Social Impact opportunities
Two paid volunteer days off annually
Pro-bono consulting projects
Environmental, Social, and Governance (ESG) initiatives
Market competitive health, dental, vision, disability, and life insurance programs
Competitive 401k plan with company match
Competitive vacation, sick and safe paid time off
Paid holidays
Parental leave
Sabbatical leave
Optional hospital, accident and sickness insurance paid 100% by the employee
Optional life and AD&D insurance paid 100% by the employee
Flexible Spending and Health Savings Accounts
Fitness reimbursement
Access to Employee Assistance Program
Group Legal Identity Theft Protection benefit paid 100% by employee
Access to 529 Plan
Commuter benefits
Adoption & Surrogacy Assistance
Access to Employee Stock Purchase Plan