Technology

SAP GRC AI Security Architect

Balin Technologies LLCHouston, TX🇺🇸United StatesPosted Oct 22, 2026

Quick Overview

Seniority

Mid Senior

Work mode

On Site

Location

Houston, TX, United States

Posted

Yesterday

Generative AIPrompt Engineering

Job Description

AI Security Architect

Location: Houston, TX(Onsite)

Summary

Hands-on security architecture role responsible for the security posture of Joule deployments — access control, data governance, and risk — working directly with the business and IT to clear use cases for POC and production.

Key Responsibilities

Define and implement security architecture for Joule deployments, including authentication, authorization, and role-based access
Design role-based access controls, least-privilege access, segregation of duties (SoD), and privileged/emergency access processes for AI administrators, developers, business users, and service accounts
Assess data sensitivity and enforce data governance controls for each Joule use case
Define controls to prevent unauthorized data exposure through prompts, AI agents, and integrations, and review AI use cases for data leakage and privacy concerns
Partner with GRC to map Joule skills and access against governance, risk, and compliance requirements
Define and maintain SAP AI security policies, standards, and governance frameworks, including approval and review processes for AI use cases before production deployment
Perform hands-on security reviews and risk assessments for each POC prior to business rollout
Conduct security reviews of custom AI agents, establish secure development lifecycle requirements, and define testing procedures for AI agent deployment and production release
Design and implement monitoring, logging, and audit trails for Joule usage
Validate secure configurations of AI services, APIs, integrations, and connectors, and support vulnerability management and remediation activities for SAP AI solutions
Drive security, observability, performance, compliance, and operational excellence standards for enterprise AI solutions across POC and production environments
Work directly with business stakeholders to explain and resolve security requirements without slowing delivery
Partner with the functional and technical roles throughout qualification, POC, and deployment
Keep IT informed of security risks, exceptions, and remediation status
Educate SAP teams on AI security risks and governance requirements, running workshops for developers, administrators, and business users, and developing guidance for secure prompt engineering and AI agent development
Maintain security documentation and support internal and external audits

Qualifications

Hands-on security architecture experience in enterprise SAP or cloud environments
Experience with SAP GRC and access control frameworks
5+ years of SAP Security and GRC experience, including SAP S/4HANA Security, SAP GRC Access Control, and SAP Identity Services
Familiarity with AI/copilot-specific security risks, such as data leakage and prompt-based access issues
Knowledge of AI security principles, machine learning risks, generative AI technologies, and AI governance frameworks, with experience implementing them in enterprise environments
Experience with SAP BTP security model and Integration Suite security
Experience securing cloud-native AI platforms using SAP BTP, SAP AI Core, Kubernetes, hyperscalers, DevSecOps practices, observability controls, and distributed system security patterns
Familiarity with MCP Server environments hosted on SAP BTP, and the security implications of SAP AI Core, SAP AI Hub, and SAP AI Gateway integrations
Experience with SAP Business AI, Joule, SAP AI Core, SAP AI Launchpad, and SAP BTP AI services, along with cloud platform experience such as Microsoft Azure
Strong understanding of data governance and compliance requirements in an enterprise setting
Ability to work directly and collaboratively with business and technical teams, not just in a gatekeeping capacity
SAP Security, SAP GRC, CISSP, CISM, or cloud security certification