Information Security AI Architect

Information Security Architect

The Information Security Architect is responsible for designing secure, compliant, and scalable architectures that enable the organization to safely adopt Microsoft 365 Copilot, large language models (LLMs), AI agents, and intelligent automation. This role blends deep expertise in Microsoft Purview, cloud security, responsible AI, and enterprise productivity tooling.

A core mandate includes implementing strong data ring-fencing controls to ensure sensitive information remains within trusted network boundaries, while also driving measurable business value from Copilot in Microsoft 365 (M365) through secure enablement, workflow optimization, and governed adoption while limiting access to other AI resources from the company network not approved by the Information Security Office.

This individual will lead the company's M365 CoPilot Purview implementation setting many of the foundational pre-requisites required for a successful and secure AI ecosphere.

Key Responsibilities

• Design secure architectures for LLMs, Microsoft 365 Copilot, generative AI systems, RAG pipelines, and autonomous AI agents.
• Define guardrails for Copilot and AI agents, including identity boundaries, access controls, and operational constraints.
• Establish governance for prompt security, model input/output filtering, and safe-use patterns across the enterprise.
• Architect secure integration patterns ensuring all AI systems operate strictly within approved network zones and data boundaries.

• Implement ring-fencing strategies to prevent sensitive data from leaving the company's network or being accessed by unauthorized AI systems.
• Design and enforce network segmentation, private endpoints, and isolation zones for AI workloads.
• Ensure Copilot, LLMs, vector stores, and AI agents only access data through approved, monitored, and policy-controlled channels.
• Build automated controls that block data exfiltration, including DLP, egress filtering, and Purview-driven policy enforcement.

• Lead secure enterprise adoption of Microsoft 365 Copilot, ensuring alignment with data governance and security policies.
• Identify high-value Copilot use cases that drive measurable productivity, efficiency, and decision-making improvements.
• Develop Copilot frameworks, usage patterns, and success metrics demonstrating
• Ensure Copilot interactions respect sensitivity labels, retention policies, and Purview-driven governance.

• Architect secure AI agent frameworks that automate business processes, knowledge retrieval, and decision support.
• Evaluate and implement AI-powered copilots, workflow automation, and intelligent assistants across departments.
• Develop standards for human-in-the-loop oversight, escalation paths, and monitoring of autonomous agent behavior.

• Lead the enterprise strategy for Microsoft Purview, ensuring data classification, lineage, and sensitivity labeling support AI and Copilot use cases.
• Implement automated governance workflows that feed LLMs, Copilot, and AI agents only the data they are authorized to access.

• Define and enforce security baselines for AI workloads, including encryption, identity, network segmentation, and model access.
• Ensure compliance with emerging AI regulations, including transparency, auditability, and model risk management requirements.
• Conduct threat modeling for Copilot, LLMs, and AI agents, including prompt injection, data leakage, model manipulation, and supply-chain risks.

• Serve as the enterprise SME for secure AI and Copilot adoption, guiding engineering, data science, legal, and compliance teams.
• Translate complex AI security concepts into actionable guidance for business leaders and technical teams.
• Lead architecture reviews for AI-enabled applications, copilots, and agent-based automation initiatives.

• Implement monitoring for Copilot usage, LLM interactions, agent actions, and data access patterns.
• Automate governance and compliance checks using Purview workflows, Azure Policy, and CI/CD pipelines.
• Continuously evaluate emerging AI threats, model vulnerabilities, and best practices for responsible AI.

Required Qualifications

• 7+ years in information security, cloud architecture, or data governance.
• 2+ years of hands-on AI experience in an implementation and/or architecture role.
• Strong experience and working knowledge of Microsoft Purview, Azure security services, and cloud governance frameworks with a proven track record of implementations.
• Strong understanding of LLMs, generative AI, Retrieval-Augmented Generation (RAG) architectures, AI agent frameworks, and Microsoft 365 Copilot.
• Proven experience driving business value through Microsoft 365 Copilot, including workflow optimization and measurable productivity gains.
• Expertise in identity and access management, data protection, and secure cloud architecture.
• Experience implementing ring-fencing, network segmentation, and data-boundary controls in Azure or AWS.
• Excellent communication faculties, capable of demystifying complex technical paradigms to a varied audience, with both technical and non-technical stakeholders.

Preferred Qualifications

• Certifications such as Azure Solutions Architect, Azure Security Engineer, CISSP, CCSP, or equivalent.
• Experience with enterprise AI platforms, vector databases, and Machine Learning Operations (MLOps) pipelines.
• Knowledge of AI observability, model risk management, and responsible AI frameworks.
• Background in data architecture, automation engineering, or enterprise integration.

Core Competencies

• Strategic thinker with the ability to influence across technical and non-technical teams.
• Strong communication skills with the ability to simplify complex AI and Copilot concepts.
• Ability to work effectively with managers, technical leads, and technical staff to understand and deliver value added solutions.
• Passion for secure, ethical, and innovative use of AI to transform business operations.

Education / Certifications

• Four-year college degree in Information Technology, Computer Science, or related field is highly desirable.

Location

This position may work from any of the following locations: Hybrid office schedule if within 75 miles of the Houston office. Remote with the ability to travel up to 5% from the following states: Texas if more than 75 miles from the office location, Virginia, Florida, Georgia, Idaho, Louisiana, Michigan, New Jersey, Minnesota, North Carolina, Pennsylvania, and Utah.

** Shaw Systems employees are not authorized to work in any state not listed above or outside of the US without specific written permission from their direct manager and approval from the Information Security Office.**

Work Environment and Physical Demands

This is a full-time position. Days of work are Monday through Friday. The daily schedule may vary from 7 am – 4 pm, 8 am – 5 pm or 9 am – 6 pm, and occasional afterhours or weekend work may be required. Hours may vary or exceed 40 in any given week depending on the needs of the business.

Travel

Limited travel (up to 15%) is expected for this position.