AI Security Manager

PowerToFly; Alabama; On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte is seeking an AI Security Manager to lead strategy, governance, and risk programs for clients adopting generative AI. You will shape security controls, governance frameworks, and risk models, guiding teams from assessment to implementation across cyber capabilities.

The role requires extensive experience in cybersecurity consulting, AI governance, and cross-functional leadership, with travel 25-50% and sponsorship may be available.

Qualifications

• Bachelor's degree or equivalent demonstrated experience in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management
• 8+ years of cybersecurity, risk management, or technology consulting experience
• Experience designing AI governance frameworks, risk operating models, or security strategy programs for enterprise clients
• Experience with AI and machine learning architectures and related risk frameworks (e.g., NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS, EU AI Act)
• Experience leading client-facing advisory or risk engagements and coordinating across identity, data, infrastructure, security operations, and application security

Responsibilities

• Lead AI cybersecurity strategy assessments, governance workshops, and risk operating model design for clients adopting generative AI and agentic systems
• Translate business objectives, regulatory obligations, and risk appetite into AI governance frameworks, risk taxonomies, and control operating models
• Advise clients on AI security strategy decisions while reviewing governance artifacts, policy documents, and risk assessments
• Manage engagement scope, teams, milestones, quality, and client expectations across strategy-led AI security programs
• Coordinate with Data, Infrastructure, Identity, Application Security, and Security Operations leaders to translate strategic recommendations into implementable technical requirements and decisions
• Shape solutions during pursuits through workshops, executive briefings, proposals, estimates, and delivery plans, developing reusable cyber strategy assets and coaching practitioners

Skills

Independent work

Team collaboration

Communication

Attention to detail

Relationship building

Project leadership

Task prioritization

Interpersonal skills

Deadline orientation

Mentoring

Education

Bachelor's degree or equivalent

Job description

AI Security Manager

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success.

As a Manager, Strategy, Growth & Transformation specializing in Strategy in Deloitte's Cyber for AI practice, you will lead client engagements that help enterprises understand the cybersecurity and enterprise risks of adopting AI and define how they will govern, manage and secure it. You will translate business, risk and regulatory objectives into cybersecurity controls, governance frameworks and risk operating models, remain directly involved in critical strategic decisions, and guide teams from assessment through implementation alongside the practice's Data, Infrastructure, Identity, Security Operations and Application Security capabilities. You will also shape solutions during pursuits and help build repeatable delivery assets.

Recruiting for this role ends on 05/31/2027.

Work you'll do

As a Manager on the Cyber Strategy & Transformation team, you will be responsible for:

• Leading AI cybersecurity strategy assessments, governance workshops, and risk operating model design for clients adopting generative artificial intelligence and agentic systems.
• Translating business objectives, regulatory obligations, and risk appetite into AI governance frameworks, risk taxonomies, and control operating models.
• Advising clients on AI security strategy decisions while reviewing governance artifacts, policy documents, and risk assessments developed by engagement teams.
• Managing engagement scope, teams, milestones, quality, and client expectations across strategy-led AI security programs.
• Coordinating with Data, Infrastructure, Identity, Application Security, and Security Operations leaders to help translate strategic recommendations into implementable technical requirements, and technical considerations into strategic decisions.
• Shaping solutions during pursuits through workshops, executive briefings, proposals, estimates, and delivery plans, while developing reusable cyber strategy assets including security controls, governance frameworks, maturity models, risk taxonomies, and playbooks, and coaching practitioners on advisory quality.

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others

The team

Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments.

Qualifications

Required:

• Bachelor's degree or equivalent demonstrated experience in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management
• 8+ years of cybersecurity, risk management, or technology consulting experience, including experience advising on artificial intelligence, machine learning, or emerging technology risk
• Experience designing AI governance frameworks, risk operating models, or security strategy programs for enterprise clients
• Experience with AI and machine learning architectures, risks of generative artificial intelligence and agentic systems, and one or more of the following: National Institute of Standards and Technology Artificial Intelligence Risk Management Framework, International Organization for Standardization/International Electrotechnical Commission 42001, Open Worldwide Application Security Project Large Language Model Top 10, MITRE ATLAS, or the European Union Artificial Intelligence Act
• Experience leading client-facing advisory or risk engagements and coordinating cross-functional workstreams across identity, data, infrastructure, security operations, and application security
• Ability to travel 25%-50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

Preferred

• Experience building AI cybersecurity controls, control guidance, governance operating models, risk committees, or intake and approval processes for enterprise AI programs
• Experience with governance, risk, and compliance platforms, AI governance tools, or model risk management systems
• Experience with AI threat modeling, red teaming, security evaluations, or secure AI development practices
• Experience building reusable strategy assets, delivery methods, or advisory frameworks used across multiple engagements
• Experience with machine learning lifecycle tools or frameworks such as PyTorch, TensorFlow, or MLflow
• One or more of the following certifications: Certified Information Systems Security Professional, Certified Information Security Manager, Certified Data Privacy Solutions Engineer, Artificial Intelligence Governance Professional, or International Organization for Standardization/International Electrotechnical Commission 42001 Lead Implementer or Lead Auditor

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.