AI Security Manager

Deloitte • Jersey City, NJ

3d • $134,500 - $265,100

About The Position

Deloitte’s Cyber for AI practice is seeking a Manager specializing in Strategy, Growth, and Transformation. The role leads client engagements that help enterprises understand the cybersecurity and enterprise risks of adopting AI and define how to govern, manage, and secure it. The manager translates business, risk, and regulatory objectives into cybersecurity controls, governance frameworks, and risk operating models, and guides teams from assessment through implementation in coordination with Data, Infrastructure, Identity, Security Operations, and Application Security capabilities.

The position also contributes to pursuits and develops repeatable delivery assets. The Cyber Strategy & Transformation offering develops and transforms cyber programs in line with clients’ strategic objectives, regulatory requirements, and risk appetite, including cyber organization design, governance, and risk assessments. The role requires an average of 25%–50% travel, depending on assignments and clients. Recruiting for this role ends on 05/31/2027.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, Risk Management, or a related field, or equivalent demonstrated experience.
• At least 6 years of cybersecurity, risk management, or technology consulting experience.
• Experience designing AI governance frameworks, risk operating models, or security strategy programs for enterprise clients.
• Experience with AI/ML architectures and risks of generative AI and agentic systems, plus familiarity with at least one of NIST AI Risk Management Framework, ISO/IEC 42001, OWASP Top 10 for LLM Applications, MITRE ATLAS, or the EU AI Act.
• Experience leading client-facing advisory or risk engagements and coordinating cross-functional workstreams across identity, data, infrastructure, security operations, and application security.
• Ability to travel 25%–50% on average, depending on work assignments and clients.
• Ability to work independently and collaboratively, communicate effectively in writing and verbally, and build and sustain professional relationships.
• Meticulous attention to detail and quality of work product.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment and meet deadlines.
• Strong interpersonal skills and professional demeanor.
• Ability to lead projects or workstreams and mentor others with clear guidance.

Nice To Haves

• Experience building AI cybersecurity controls, control guidance, governance operating models, risk committees, or intake and approval processes for enterprise AI programs.
• Experience with governance, risk, and compliance platforms, AI governance tools, or model risk management systems.
• Experience with AI threat modeling, red teaming, security evaluations, or secure AI development practices.
• Experience building reusable strategy assets, delivery methods, or advisory frameworks used across multiple engagements.
• Experience with machine learning lifecycle tools or frameworks such as PyTorch, TensorFlow, or MLflow.
• One or more of the following certifications: Certified Information Systems Security Professional, Certified Information Security Manager, Certified Data Privacy Solutions Engineer, Artificial Intelligence Governance Professional, or ISO/IEC 42001 Lead Implementer or Lead Auditor.

Responsibilities

• Lead AI cybersecurity strategy assessments, governance workshops, and risk operating model design for clients adopting generative AI and agentic systems.
• Translate business objectives, regulatory obligations, and risk appetite into AI governance frameworks, risk taxonomies, and control operating models.
• Advise clients on AI security strategy decisions and review governance artifacts, policy documents, and risk assessments developed by engagement teams.
• Manage engagement scope, teams, milestones, quality, and client expectations across strategy-led AI security programs.
• Coordinate with Data, Infrastructure, Identity, Application Security, and Security Operations leaders to translate strategic recommendations into implementable technical requirements and technical considerations into strategic decisions.
• Shape pursuit solutions through workshops, executive briefings, proposals, estimates, and delivery plans.
• Develop reusable cyber strategy assets, including security controls, governance frameworks, maturity models, risk taxonomies, and playbooks.
• Coach practitioners on advisory quality.
• Lead projects or workstreams, manage competing tasks, meet deadlines, and mentor and guide others.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and applicable factors.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager