Associate Director - Cyber Security (AI & Data Science)

Enforces policies and procedure in partnership with onshore analytics leaders to ensure consistent, reliable data output - educating and enforcing adherence of standards across the team

Consults on the development of new standard operating procedures based on knowledge of existing and emerging analytics principles, theories and techniques to inform business decisions and the operating model

Establish systems of controls and Quality Assurance to ensure adherence to data quality and automation in alignment with IT standards.

Communicates with leadership on analytics matters to ensure enterprise-wide understanding of their contribution to a mature analytics organization’s success.

Perform administrative and support activities including security administration, release management and troubleshooting

Perform development activities from gathering requirements and designing solutions, through developing code / reports, to testing and release / deployment

University (Degree) Preferred

5+ Years Required; 7+ Years Preferred

Physical Requirements: Sedentary Work

12–15+ years in Cybersecurity, Information Security, AI Security, Security Engineering, or related technology leadership roles.

We are looking for a strategic and hands-on Cybersecurity AI leader to define and drive the organization’s strategy for applying Artificial Intelligence and Agentic AI to cybersecurity , while establishing security, governance, and risk controls for AI adoption across the enterprise.

The role will lead the development of AI-enabled cybersecurity capabilities , including AI-driven SOC, security automation, threat detection, identity and access intelligence, data security, insider-threat detection, third-party risk, vulnerability management, security engineering, and cyber risk analytics.

The leader will also establish a Zero Trust–aligned security framework for AI and autonomous agents , covering non-human identities, intent, access, data usage, model interactions, tool invocation, and autonomous actions.

Define and execute the enterprise Cybersecurity AI strategy and roadmap .

Identify high-value cybersecurity use cases for GenAI, ML and Agentic AI.

Build business cases, investment roadmaps and measurable ROI for AI-driven security transformation.

Establish responsible and secure adoption of AI across Cybersecurity.

Lead AI transformation across:

AI-enabled SOC and Security Operations

Threat detection and investigation

Incident response automation

Security orchestration and autonomous response

Vulnerability and exposure management

Identity and access intelligence

Insider-threat detection

Data Loss Prevention and data classification

Third-party / supply-chain cyber risk

Threat intelligence

Security analytics and cyber-risk dashboards

Application and cloud security

Security engineering automation

Define controls and architecture for securing enterprise AI environments, including:

GenAI and LLM security

AI applications and copilots

Agentic AI

AI agents and non-human identities

Model and API security

Prompt injection and data leakage

AI supply-chain/model risks

RAG and vector database security

AI data governance and lineage

Model access and authorization

AI red teaming and adversarial testing

AI runtime monitoring

Establish a Zero Trust security model for autonomous AI agents , covering:

Key areas include:

Non-human identity management

Agent authentication and authorization

Role/attribute-based access control

Just-in-time and least-privilege access

Agent-to-agent communication

Tool/API access governance

Data access and classification

Autonomous action controls

Human-in-the-loop controls

Agent activity monitoring and auditability

Dynamic risk-based policy enforcement

Blast-radius containment

Establish AI security standards, policies and control frameworks.

Partner with Legal, Privacy, Risk, Compliance, Data and Enterprise Architecture teams.

Develop AI risk assessment and security review processes.

Map controls to relevant regulatory and industry frameworks.

Define AI security metrics, KRIs and executive dashboards.

Lead architecture and implementation of AI-enabled security platforms.

Integrate AI capabilities across existing SOC, SIEM, SOAR, IAM, DLP, EDR, CSPM and GRC ecosystems.

Drive automation and reduction of manual security operations.

Evaluate emerging cybersecurity AI technologies, startups and platforms.

Build internal AI security capabilities where commercial solutions are insufficient.

Lead a team of cybersecurity, AI security, security engineering and data/AI specialists.

Partner with CISO, CIO, CTO, Chief Data Officer, Chief AI Officer and business leadership .

Present AI security strategy, risk and investment requirements to senior leadership.

Develop strategic partnerships with technology vendors, startups and research organizations.

Mentor and develop senior cybersecurity and AI talent.

12–15+ years of cybersecurity / information security experience.

Strong understanding of security architecture, SOC, IAM, AppSec, Cloud Security, GRC and security engineering.

Experience leading enterprise-scale cybersecurity transformation.

Strong understanding of Zero Trust principles.

Strong understanding of: Generative AI LLMs Machine Learning RAG AI agents Agentic workflows AI APIs and orchestration AI security architecture

Generative AI

LLMs

Machine Learning

RAG

AI agents

Agentic workflows

AI APIs and orchestration

AI security architecture

Experience implementing AI/ML solutions in cybersecurity .

Understanding of AI risks, model security and AI governance.

Ability to translate emerging AI technologies into production-grade cybersecurity capabilities .

Experience with cloud platforms and modern security architectures.

Understanding of APIs, microservices, containers and DevSecOps.

Experience integrating AI with enterprise security platforms.

Knowledge of relevant frameworks such as:

NIST Cybersecurity Framework

NIST AI RMF

Zero Trust Architecture

ISO 27001

SOC 2

GDPR / CCPA

PCI DSS

SOX / ITGC

Industry-specific cybersecurity regulations

TIAA Global Capabilities was established in 2016 with a mission to tap into a vast pool of talent, reduce risk by insourcing key platforms and processes, as well as contribute to innovation with a focus on enhancing our technology stack. TIAA Global Capabilities is focused on building a scalable and sustainable organization , with a focus on technology , operations and expanding into the shared services business space.

Working closely with our U.S. colleagues and other partners, our goal is to reduce risk, improve the efficiency of our technology and processes and develop innovative ideas to increase throughput and productivity.

We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.

At TIAA, we're on a mission to build on our 100+ year legacy of delivering for our clients while evolving to meet tomorrow's challenges. We equip our associates with future-focused skills and AI tools that enable us to advance our mission. Together, we are fighting to ensure a more secure financial future for all and for generations to come. We are guided by our values: Champion Our People, Be Client Obsessed, Lead with Integrity, Own It, and Win As One. They influence every decision we make and how we work together to serve our clients every day. We thrive in a collaborative in-office environment where teams work across organizational boundaries with shared purpose, accelerating innovation and delivering meaningful results. Our workplace brings together TIAA and Nuveen's entrepreneurial spirit, where we work hard and work together to create lasting impact. Here, every associate can grow through meaningful learning experiences and development pathways—because when our people succeed, our impact on clients' lives grows stronger.

TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.

If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team:

Phone: (800) 842-2755

Email: [email protected]

For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here .

For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here .

For Applicants of TIAA Global Capabilities, click here .

For Applicants of Nuveen residing in Europe and APAC, please click here .