Security AI Solution Architect

Define the Tower 4 reference architecture for controlled digital agents, security pattern libraries, evidence normalization, and secure-by-default implementation.

· Translate IBM internal security standards, SOC 2, ISO 27001, infrastructure checkpoint evidence, and cross-tower requirements into a common control and assessment architecture.

· Design human-in-the-loop controls, approval gates, audit logging, least-privilege access, rollback patterns, and exception handling for agentic workflows.

· Own security architecture decisions for agent-assisted discovery, IAM/offboarding assessment, vulnerability triage, App Sec/repository review, evidence reporting, and remediation workflow support.

· Partner with CISO, CSS, BISO, IBM Consulting Delivery CIO, PMO, and tower architects to align Tower 4 outputs with existing IBM control programs and shared services.

· Define secure-by-default patterns for new / existing Consulting assets and reusable remediation patterns for existing delivery exposure.

· Maintain Tower 4 architecture artifacts, decision records, control catalog, pattern catalog, and exception principles.

· Review and approve agentic designs before production use, especially where agents access security evidence, project data, repositories, ticketing systems, or control tooling.