Your role at a glance
The Principal AI Security & Privacy Architect owns the security and privacy architecture for AI/ML-enabled products and enterprise AI platforms. This role partners across the enterprise to embed secure-by-design and privacy-by-design controls across the AI lifecycle - delivering trustworthy, compliant, audit-ready AI solutions, tailored to specific business needs. The ideal candidate brings a rigorous engineering foundation, deep governance experience, and the project leadership skills to drive cross-functional initiatives from scoping through delivery.

What we are looking for

Key Roles and Responsibilities:

AI Architectures

• Train the entire business on safe AI usage that adheres to privacy and cybersecurity goals.
• Coordinate with parent company on AI solutions, vetting strategies, security and privacy governance and guidance.
• Design solutions for LLM usage and AI-generated software that can be easily adopted by the business.
• Analyze and support proposed AI projects companywide, serving as the technical reviewer for the AI Center of Excellence.

AI Security, Privacy & Governance

• Architect security and privacy controls for AI/ML solutions, including data and model pipelines, AI-enabled product features, cloud services, and customer-facing surfaces.
• Define secure-by-design and privacy-by-design patterns; translate regulatory and policy requirements (GDPR, DPDPA 2023, NIST AI RMF, ISO 42001) into actionable engineering guidance.
• Lead hands-on PIA, DPIA, and TPRA assessments for AI/ML systems and data platforms, identifying risks including re-identification, inference attacks, model inversion, and consent gaps.
• Review AI model cards, training data sourcing practices, and automated decision-making workflows to surface privacy, fairness, and transparency risks.
• Serve as a subject-matter expert on privacy-by-design principles as applied to generative AI, LLMs, recommendation systems, and other deployed AI tools.

Risk Management & Assurance

• Define AI risk and control frameworks aligned to the enterprise risk model; drive mitigations, documentation standards, and risk acceptance packages.
• Support the risk register and compliance calendar for AI security and privacy activities, tracking open issues, remediation actions, and regulatory deadlines.
• Prepare and present governance status reports, risk summaries, and architectural decision records to senior leadership and relevant committees.
• Support vendor and third-party AI tool assessments, including contractual data processing reviews, security questionnaires, and due diligence activities.

Project Management & Cross-Functional Leadership

• Lead end-to-end governance and architecture projects - from scoping and stakeholder alignment through implementation and post-deployment review - on time and within defined parameters.
• Integrate AI security and privacy requirements into the secure SDLC, architecture review boards, go-to-market readiness gates, and customer/regulatory assurance responses.
• Coordinate with Engineering, Data Science, Legal, Product, and Compliance teams to embed governance checkpoints throughout the AI/ML development lifecycle.
• Manage project plans, milestone tracking, and status reporting using tools such as Jira, Asana, or MS Project; proactively surface blockers and drive resolutions across workstreams.
• Facilitate architecture and risk review sessions, documenting decisions and ensuring follow-through on action items with accountable owners and defined timelines.

KNOWLEDGE & ATTRIBUTES

• Deep analytical and regulatory interpretation skills with the ability to translate complex AI risk requirements into practical, implementable guidance for engineering teams.
• Working knowledge of AI/ML concepts: supervised and unsupervised learning, generative AI, LLMs, automated decision-making, and model governance.
• Structured, methodical approach to project management - experienced with agile and waterfall delivery frameworks, comfortable with ambiguity, and adept at prioritizing competing demands across concurrent workstreams.
• Excellent written and verbal communication skills; ability to present complex security and risk topics credibly to both technical and executive audiences.
• Collaborative, curious, and proactive - a self-starter who builds trust with cross-functional peers and drives initiatives through to measurable outcomes.

ACADEMIC QUALIFICATIONS & CERTIFICATIONS

• Bachelor's degree required - preferably in Computer Science, Information Security, Law, Privacy, Engineering, Governance/Risk Management/Compliance, or related discipline.

Certifications - Desired (any of the following)

• CIPP/E, CIPP/A, CIPM, or CIPT (IAPP) - Data Privacy
• AI Governance Professional (AIGP) (IAPP) - AI & Privacy combined
• CISSP, CCSP, or equivalent - Information / Cloud Security
• ISO 42001 Lead Implementer or Auditor - AI Management Systems

REQUIRED EXPERIENCE

• Senior-level experience (7+ years) in privacy, security, and product architecture with accountability for governance and risk decisions.
• Demonstrated hands-on leadership of PIA/DPIA/TPRA and privacy-by-design assessments for AI/ML systems and enterprise data platforms.
• Strong security engineering foundation including secure SDLC, application and product security, and threat and risk assessment methodologies.
• Proven track record leading cross-functional projects with multiple stakeholders; familiarity with project management tools (e.g., Jira, Asana, MS Project) is required.

Preferred Qualifications

• Experience supporting enterprise AI governance programs and/or contributing to AI policy development at a senior level.
• Familiarity with AI/ML model governance tooling, MLOps pipelines, and data lineage practices.
• Experience working within regulated industries (financial services, healthcare, or technology) where AI assurance is subject to external audit.

PHYSICAL REQUIREMENTS

• Primarily sitting with some walking, standing, and bending.
• Able to hear and speak on the telephone.
• Close visual work on a computer terminal.
• Dexterity of hands and fingers to operate any required to operate computer keyboard, mouse, and other technical instruments.

Work conditions & other requirements

• Extensive daily usage of workstation or computer.
• Must be available for 24x7 support of customers and NTT GDC.
• Must be reachable via telephone, text, and email on a 24x7 basis.
• Some travel as required. Travel requirements may vary based on the frequency and intensity of remote site operations

UID: 3023

Compensation Pay Range

For roles residing in the US, we share pay and benefit levels to support pay transparency requirements. For other countries, we are more than happy to share our competitive pay and benefit levels during the interview process.

This is a remote position that requires reliable internet connection and electricity. A monthly stipend is provided to cover expenses associated with working remotely and use of a personal mobile device, if applicable.

NTT Global Data Centers Americas, Inc. offers competitive compensation based on experience, education, and location. Base salary for this position is $171,200 - $244,500.

All regular full-time employees are eligible for an annual bonus; payout is dependent upon individual and company performance.

Employees receive paid time-off, medical, dental, and vision benefits, life and supplemental insurance, short-term and long-term disability, flexible spending account, and 401k retirement plan to create a rich Total Rewards package.