About this role
Salary: £49,000 - 89,000 per year
Requirements: Substantial progressive experience in Information Security, Security Architecture, or related technical roles, with demonstrated expertise in AI security, cloud security, or application security.Strong working knowledge of generative AI security risks and controls, including prompt injection, data leakage, model abuse, output manipulation, and the supply chain and integration risks associated with third-party AI platforms and APIs.Experience assessing and governing the adoption of enterprise AI and generative AI tools, including productivity platforms such as Microsoft Copilot, developer assistance tools, and LLM-integrated applications and workflows.Familiarity with AI security frameworks and standards including OWASP LLM Top 10 and NIST AI RMF, and working awareness of EU AI Act obligations relevant to enterprise AI governance and security.Experience engaging with governance committees, risk review boards, or cross-functional taskforces as a security subject matter expert, influencing decisions and representing security requirements to non-security stakeholders.Working knowledge of cloud environments (Microsoft Azure and/or Amazon AWS) and the AI and ML services offered within those platforms, with the ability to assess security configurations, data handling behaviors, and integration risks.Experience partnering with development teams, data teams, and business stakeholders to translate security and governance requirements into practical, delivery-compatible guidance and standards.Strong understanding of data protection principles as they apply to AI systems, including data residency, purpose limitation, PHI and PII handling in AI workflows, and cross-border data transfer implications under GDPR and applicable regional regulations.Familiarity with secure architecture patterns for LLM-integrated systems, including RAG pipeline security, agentic system design, prompt workflow controls, and API gateway patterns for model endpoints is preferred.Experience within regulated industries — life sciences, healthcare, or financial services — with awareness of sector-specific compliance and data protection obligations relevant to AI use is preferred.Bachelors degree in Computer Science, Information Security, or equivalent practical experience is preferred.Relevant certifications such as CISSP, CISM, CCSP, AWS/Azure Security Specialty, or equivalent are preferred but not mandatory.Strong written and verbal communication skills in English, with the ability to produce governance documentation, security standards, and executive-level reporting across a global, matrixed organization. Responsibilities: Contribute to and help execute our AI security strategy, providing hands-on program delivery across governance, risk assessment, and stakeholder engagement workstreams under the direction of the Security Architecture AI lead.Act as a primary security architecture partner for business units, development teams, and the Data Office as they evaluate, adopt, and scale generative AI tools and platforms, ensuring security requirements are understood and addressed from the outset.Own and operate our AI security intake and review process for new generative AI platform and tool requests, conducting structured security assessments before organizational adoption is approved.Represent Security Architecture in our existing AI governance committees and taskforces, ensuring security risk positions, architectural guardrails, and governance requirements are embedded in decisions and communicated consistently across the organization.Develop, maintain, and operationalize our AI security standards, guidelines, and reference architectures covering generative AI platforms, LLM-integrated applications, agentic systems, and AI-enabled developer and productivity tooling.Conduct AI security architecture reviews for new and existing AI integrations, including agentic workflows, retrieval-augmented generation (RAG) pipeline designs, LLM API integrations, and multi-model orchestration patterns.Build and maintain scalable AI security workflows, assessment playbooks, and decision frameworks that enable the organization to evaluate AI adoption requests efficiently and consistently.Define and maintain security requirements for enterprise generative AI platforms, addressing prompt security, data residency, access and identity controls, output handling, audit logging, and integration with our broader identity and data governance controls.Partner with development teams to provide practical AI security guidance, supporting the secure design of AI-integrated applications.Support the development of AI security awareness and guidance materials for developers, data teams, and business stakeholders across our organization.Monitor the evolving AI security and regulatory landscape and translate findings into timely, actionable updates to our AI governance posture and security standards.Collaborate with Legal, Privacy, and Compliance teams on AI-related regulatory requirements, including obligations under the EU AI Act, GDPR implications of AI data processing, and sector-specific requirements applicable to life sciences and healthcare AI deployments.Define metrics and reporting for AI security governance, providing leadership and governance stakeholders with clear visibility into AI adoption volume, risk profile, assessment coverage, and program maturity across the organization. Technologies: AIAPIAWSAzureCloudCopilotEmbeddedSupportLLMOWASPRAGSecurityArchitect More:
We are IQVIA, a leading global provider of clinical research services, commercial insights, and healthcare intelligence to the life sciences and healthcare industries. This senior individual contributor role sits within our global Information Security organization and Security Architecture team, working closely with Security Architecture, Cloud Security, Application Security, the Data Office, Legal, Privacy, Compliance, and business units across our global operations. The role is based in London, United Kingdom, and is full time. We have existing AI governance committees and taskforces in place, and this role will help mature our AI security strategy as adoption of technologies such as Microsoft Copilot, Claude, and other generative AI platforms continues to scale across our enterprise. We are committed to integrity in our hiring process and maintain a zero tolerance policy for candidate fraud.
last updated 36 week of 2026