Director, AI Security at Corebridge Financial in Houston, TX

Job description

Who We Are At Corebridge Financial, we believe action is everything. That’s why every day we partner with financial professionals and institutions to make it possible for more people to take action in their financial lives, for today and tomorrow. We align to a set of Values that are the core pillars that define our culture and help bring our brand purpose to life: We are stronger as one: We collaborate across the enterprise, scale what works and act decisively for our customers and partners. We deliver on commitments: We are accountable, empower each other and go above and beyond for our stakeholders. We learn, improve and innovate: We get better each day by challenging the status quo and equipping ourselves for the future. We are inclusive: We embrace different perspectives, enabling our colleagues to make an impact and bring their whole selves to work. Who You’ll Work With: The Information Technology (IT) organization is the technological foundation of our business and works in collaboration with our partners from across the company. The team drives technology and digital transformation and partners with business leaders to design and execute new strategies across the company. They also ensure the necessary IT risk management and security measures are in place and aligned with enterprise architecture standards and principles. About The Role: The Director of AI Security will own the enterprise’s AI Security Standard and the technical security program that operationalizes it — designing, implementing, and governing the controls that ensure the organization builds and consumes artificial intelligence (including generative AI, agentic AI, and third-party/embedded AI capabilities) securely and in compliance with emerging regulatory expectations. Reporting to the Head of Cyber Data Protection and AI Security, this role works in close, continuous partnership with the Enterprise AI team , which owns the overarching AI Strategy and AI Standard (governing acceptable use, business adoption, and enterprise AI investment). The Director of AI Security ensures that standard is backed by a rigorous, enforceable security layer — covering model risk, data protection, identity, vulnerability management, and attack-path/threat modeling across the AI lifecycle, from model selection and data sourcing through deployment, monitoring, and decommissioning. This is a hands-on leadership role for someone who can operate simultaneously at the standards/control-framework level (audit- and board-ready documentation) and the technical control level, while building a trusted, collaborative relationship with a peer team that owns adjacent AI governance. Responsibilities: AI Security Standard Ownership & Cross-Functional Alignment Ensure the AI Security Standard is fully aligned with, and traceable to, the Enterprise AI team’s AI Strategy and AI Standard — acting as the primary security liaison and co-author on any sections where the two documents intersect (approved use cases, data handling, model sourcing). Partner with the Enterprise AI team to define and maintain the security review criteria feeding the Approved AI/Model List, including risk-tiering methodology for AI types (traditional ML, generative AI, agentic AI, embedded/third-party AI) and a joint exception/waiver process. Co-develop Appropriate Use Policy (AUP) security requirements with the Enterprise AI team, ensuring employee-, developer-, and business-unit-facing guidance reflects both AI Standard intent and AI Security Standard controls. Map AI security requirements to relevant regulatory and industry frameworks (e.g., NIST AI RMF, ISO/IEC 42001, EU AI Act, OWASP Top 10 for LLMs, MITRE ATLAS) and translate them into the internal control requirements embedded in the AI Security Standard. Establish a standing governance cadence (working group, review board, or joint steering sync) with the Enterprise AI team to keep the AI Standard and AI Security Standard synchronized as AI adoption scales and