FICO

Principal Data and AI Security Architect

FICO

full-time

Posted on:

Location Type: Remote

Location: Remote • 🇺🇸 United States

Visit company website
✨ AI Apply
Apply

Salary

💰 $161,000 - $253,000 per year

Job Level

Lead

Tech Stack

AWSAzureCloudGoogle Cloud PlatformJavaJenkinsOraclePythonTerraform

About the role

  • Secure the design of AI and ML capabilities within FICO Platform, services and corporate tools.
  • Provide full-stack security architecture design from cloud infrastructure to application features for FICO and internal customers.
  • Oversee security aspects of Analytical Model Life Cycle, and influence stakeholders for adopting best security standards and implementations.
  • Define comprehensive data security strategy and guide implementation of enterprise-wide data protection programs including DLP, data classification, security logging, and data protection controls across products and enterprise systems.
  • Proof the security implementations within infrastructure & application deployment manifests and the MLSecOps pipeline.
  • Define required controls and capabilities for the protection of FICO AI and data services and environments and collaborate with architects, developers and product managers, to implement security controls at scale.
  • Design, Implement and manage scalable security controls and automation in a DevOps environment within public clouds (AWS, Azure, GCP, Oracle) across IaaS, PaaS, SaaS, and container platforms.
  • Integrate security in depth throughout FICO software delivery processes and pipelines.

Requirements

  • Experience in securing AI and ML models and data systems, as well as building MLSecOps and data security controls.
  • Knowledge of adversarial techniques within the analytics domains, and AI related threats and mitigation strategies.
  • Experience designing and implementing enterprise data security programs including Data Loss Prevention (DLP), data classification frameworks, data governance controls, and data protection strategies across cloud and on-premises environments.
  • Experience in architecture, security reviews and requirement definition for complex environments.
  • Experience in threat modeling, code reviews, security testing, vulnerability detection, attacker exploit techniques, and methods for their remediation.
  • Hands-on experience with programming languages, such as: Java, Python, etc.
  • Experience deploying and securing cloud environments, preferably AWS with focus on data security services and data lake/warehouse security architectures.
  • Hands-on experience with IaC (Terraform, Cloudformation, Helm) and CI/CD pipelines (Github, Jenkins, JFrog).
  • Experience with security testing at scale and integration of security controls into CI/CD workflows for rapid deployments.
  • Familiarity with industry regulations, frameworks, and practices. For example, PCI, ISO 27001, NIST, GDPR, CCPA, and data privacy regulations.
  • Ability to articulate complex architectural challenges with the business leadership and product management teams.
  • Independently drive transformational security projects across teams and organizations.
Benefits
  • An inclusive culture strongly reflecting our core values: Act Like an Owner, Delight Our Customers and Earn the Respect of Others.
  • The opportunity to make an impact and develop professionally by leveraging your unique strengths and participating in valuable learning experiences.
  • Highly competitive compensation, benefits and rewards programs that encourage you to bring your best every day and be recognized for doing so.
  • An engaging, people-first work environment offering work/life balance, employee resource groups, and social events to promote interaction and camaraderie.

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills
AI securityML securitydata security strategyData Loss Prevention (DLP)data classificationsecurity loggingDevOps securitythreat modelingvulnerability detectionprogramming languages
Soft skills
stakeholder influencecommunicationproject managementtransformational leadershiparticulation of architectural challenges
Certifications
PCIISO 27001NISTGDPRCCPA