Sr Security Architecture Manager

Job description

Coupa makes margins multiply through its community-generated AI and industry-leading total spend management platform for businesses large and small. Coupa AI is informed by trillions of dollars of direct and indirect spend data across a global network of 10M+ buyers and suppliers. We empower you with the ability to predict, prescribe, and automate smarter, more profitable business decisions to improve operating margins. **Why join Coupa?** - **Pioneering Technology:** At Coupa, we're at the forefront of innovation, leveraging the latest technology to empower our customers with greater efficiency and visibility in their spend. - **Collaborative Culture:** We value collaboration and teamwork, and our culture is driven by transparency, openness, and a shared commitment to excellence. - **Global Impact:** Join a company where your work has a global, measurable impact on our clients, the business, and each other. Learn more on [Life at Coupa](https://insde.co/uzoy) blog and hear from our employees about their experiences working at Coupa. **The Impact of a Sr Security Architecture Manager at Coupa:** We are seeking a highly skilled and visionary Security Architect to lead the design and implementation of robust security frameworks, with a dedicated focus on protecting our Artificial Intelligence (AI) and Machine Learning (ML) ecosystems. The ideal candidate will bridge the gap between traditional security architecture and the evolving landscape of AI-driven innovation, ensuring that business requirements are translated into secure, resilient, and ethical architectural designs. This role requires a sophisticated analytical mind and the ability to advocate for security-by-design across data science and engineering teams. ### What You'll Do: - **Secure AI Architecture:** Design and implement secure architectural solutions for AI/ML pipelines, large language models (LLMs), and automated decision systems. - **Risk & Threat Modeling:** Conduct security assessments and risk analyses specifically targeting AI-related threats such as prompt injection, model inversion, and data poisoning. - **AI Governance & Standards**: Develop and maintain security standards and policies tailored to AI development, including data provenance and model integrity. - **Expert Guidance:** Provide recommendations on AI security best practices to data science, DevOps, and business leadership teams. **Technology Evaluation:** Evaluate and recommend emerging security technologies, such as AI-driven SIEM, automated Red Teaming tools, and privacy-enhancing technologies. - **Regulatory Compliance:** Collaborate with legal teams to ensure AI deployments adhere to global regulations like the EU AI Act, GDPR, and HIPAA. - **Vendor Assessment:** Participate in security reviews of third-party AI service providers and foundational model creators. - **Auditing & Compliance**: Manage security assessments for AI environments, aligning with frameworks like ISO 42001 (AI Management System) and SOC2. - **Documentation:** Create high-quality technical documentation and data flow diagrams (DFDs) illustrating the movement of sensitive data through AI models. - **Mentorship:** Mentor junior security professionals and data scientists on the nuances of AI safety and security. ### What You Will Bring to Coupa: - Degree: Bachelor’s degree in Computer Science, Data Science, or Information Security; Master’s degree preferred. - Experience: Minimum of 10 years in information security, with at least 5 years in security architecture and significant experience securing high-scale data or AI environments. - Frameworks: Deep understanding of NIST AI Risk Management Framework, OWASP Top 10 for LLMs, and ISO 27001. - Cloud & Infrastructure: Proficiency in designing secure AI architectures on cloud platforms like AWS, Azure, and GCP. - AI Security: Knowledge of secure coding for AI, model monitoring, and defensive techniques against adversarial attacks. Experience with Anthropic Claude, Google Gemini, and Azure OpenAI/ChatGPT is a plus. - Identity & Privacy: Experience with IAM for automated agents and privacy-enhancing technologies (e.g., differential privacy, homomorphic encryption). - Traditional Security: Mastery of firewalls, IDPS, SIEM, and endpoint security within hybrid environments.