- An exciting permanent opportunity to define strategy, roadmap and delivery of cyber uplift across Data & AI

About the team

A fantastic prospect to join the RBA and set the security direction for the Bank's data, analytics and AI domain – including data platforms, data governance, machine learning, generative AI and emerging agentic AI capabilities that support business and technology outcomes.

This role sits within the IT Cyber Strategy & Planning team and is the Bank's Domain Security Architect for Data & AI. You will work closely with business stakeholders, data and analytics teams, IT platform owners, architecture, cyber teams, risk and compliance to define the cyber strategy, target state and prioritised roadmap for secure data and AI adoption.

You will translate enterprise cyber strategy into practical architecture, standards, guardrails and delivery outcomes – with a strong focus on secure data lifecycle, privacy and confidentiality, AI security, model risk, identity, access, monitoring and regulatory alignment.

About the role

- Lead the cyber strategy, target state and multi-year roadmap for the Data & AI domain, ensuring alignment to the Bank’s enterprise cyber strategy, risk appetite, technology direction and responsible AI objectives.
- Develop enterprise security architecture for securing data platforms, analytics, Azure cloud services, AI and machine learning platforms, Microsoft Copilot, Azure AI Foundry, generative AI services, and emerging agentic AI capabilities.
- Define secure patterns and guardrails for the end-to-end data and AI lifecycle, covering data classification, ingestion, storage, processing, sharing, retention, model development, deployment, monitoring and retirement.




- Design and review secure technology solutions aligned with enterprise security standards and regulatory frameworks, including NIST RMF, OWASP Top 10 LLM, ISO 42001 and relevant AI governance expectations.
- Conduct and oversee security risk assessments, threat modelling and architecture reviews for data and AI initiatives, supporting stakeholders to understand risks, mitigations and trade-offs across value, risk, cost, complexity and operability.
- Author and maintain security reference architectures, standards, and patterns and secure-by-design guidance for data platforms, AI services, model development environments and business-led AI use cases.
- Partner with business, IT, data science and AI teams, database platform owners, data governance, privacy, legal, risk and cyber teams to embed security requirements early in Data & AI initiatives and support safe adoption at pace.
- Prioritise investment and delivery decisions for cyber-funded and technology-funded initiatives in the domain, ensuring the roadmap delivers clear risk reduction, regulatory alignment and operational resilience outcomes.
- Represent Cyber to business, technology, project and governance stakeholders, providing a clear, consistent position and escalating issues with practical, risk-based recommendations.

About you

You will have extensive hands‑on experience in data, analytics and AI security architecture,



and the judgement to balance business value, regulatory expectations, cyber risk, cost, complexity and operability when setting direction for a large, complex environment.

- 10+ years’ experience in cyber security, technology risk, data security or security architecture roles, including significant experience leading security architecture for data, analytics, AI or enterprise technology domains.
- Excellent stakeholder engagement and communication skills, with the ability to work across business and IT teams, explain complex data and AI security risks in plain language, and influence decisions without direct authority.
- Should have deep security architecture experience in data and AI security, and experience across the areas below:
- Data Security including data classification, prevention and monitoring
- Microsoft Copilot and Azure Foundry security controls
- Azure cloud & platform security controls
- Demonstrated experience defining and delivering a security strategy or roadmap for a technology domain, including prioritising a backlog and driving measurable risk reduction and secure adoption outcomes.
- Proven cyber leadership experience operating as a domain security architect, translating enterprise cyber strategy into practical architecture, standards, roadmaps and delivery outcomes.
- Ability to define and measure performance for cyber initiatives using clear success measures, delivery milestones, risk reduction indicators, control effectiveness, compliance uplift and operational resilience outcomes.
- Strong understanding of cyber risk assessment methodologies, threat modelling and control frameworks such as Essentia

📌 Domain Security Architect – Data (Sydney)
🏢 Reserve Bank of Australia
📍 Sydney