AI Security Manager

AI Security Manager

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

As a Manager, Strategy, Growth & Transformation specializing in Strategy in Deloitte's Cyber for AI practice, you will lead client engagements that help enterprises understand the cybersecurity and enterprise risks of adopting AI and define how they will govern, manage and secure it. You will translate business, risk and regulatory objectives into cybersecurity controls, governance frameworks and risk operating models, remain directly involved in critical strategic decisions, and guide teams from assessment through implementation alongside the practice's Data, Infrastructure, Identity, Security Operations and Application Security capabilities.

You will also shape solutions during pursuits and help build repeatable delivery assets.

Recruiting for this role ends on 05/31/2027.

As a Manager on the Cyber Strategy & Transformation team, you will be responsible for:

• Leading AI cybersecurity strategy assessments, governance workshops, and risk operating model design for clients adopting generative artificial intelligence and agentic systems.
• Translating business objectives, regulatory obligations, and risk appetite into AI governance frameworks, risk taxonomies, and control operating models.
• Advising clients on AI security strategy decisions while reviewing governance artifacts, policy documents, and risk assessments developed by engagement teams.
• Managing engagement scope, teams, milestones, quality, and client expectations across strategy-led AI security programs.
• Coordinating with Data, Infrastructure, Identity, Application Security, and Security Operations leaders to help translate strategic recommendations into implementable technical requirements, and technical considerations into strategic decisions.
• Shaping solutions during pursuits through workshops, executive briefings, proposals, estimates, and delivery plans, while developing reusable cyber strategy assets including security controls, governance frameworks, maturity models, risk taxonomies, and playbooks, and coaching practitioners on advisory quality.

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or work streams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others

Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.

Required:

• Bachelor's degree or equivalent demonstrated experience in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management
• 8+ years of cybersecurity, risk management, or technology consulting experience, including experience advising on artificial intelligence, machine learning, or emerging technology risk
• Experience designing AI governance frameworks, risk operating models, or security strategy programs for enterprise clients
• Experience with AI and machine learning architectures, risks of generative artificial intelligence and agentic systems, and one or more of the following:
  National Institute of Standards and Technology Artificial Intelligence Risk Management Framework, International Organization for Standardization/International Electrotechnical Commission 42001, Open Worldwide Application Security Project Large Language Model Top 10, MITRE ATLAS, or the European Union Artificial Intelligence Act
• Experience leading client-facing advisory or risk engagements and coordinating cross-functional work streams across identity, data,…