AI Security Strategy & Transformation Lead

Deloitte France; Richmond (VA); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte's Cyber Strategy & Transformation team is seeking an AI Security Senior Consultant to lead AI risk governance work and translate regulatory requirements into actionable frameworks and roadmaps. You will collaborate with data, infrastructure, identity and application security colleagues to ensure strategy becomes implementable requirements.

The role includes guiding junior practitioners, leading client workshops, and delivering governance artifacts, risk registers, and policy templates.

Qualifications

• Bachelor's degree in a relevant field is required.
• 4+ years in cybersecurity, risk, or technology consulting with AI/ML exposure.
• Experience with AI risk and security frameworks and regulations.
• Ability to travel 25-50% on average.
• Experience with governance platforms or model risk management systems is a plus.

Responsibilities

• Lead discovery and current-state assessments of AI cybersecurity controls and governance.
• Facilitate stakeholder workshops with security, risk, data science, legal and business leaders.
• Develop AI risk registers and control frameworks aligned to standards (NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS).
• Translate recommendations into workstreams and roadmaps; guide junior practitioners.
• Draft governance artifacts and AI security awareness materials.
• Own a workstream, manage milestones, and support client demonstrations and pursuits.

Skills

AI/ML concepts

AI risk frameworks

Risk assessments & governance

Client advisory / consulting

Travel willingness

ML lifecycle tooling

Education

Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management

Tools

PyTorch

TensorFlow

MLflow

Job description

Deloitte's Cyber Strategy & Transformation team is seeking an AI Security Senior Consultant to lead AI risk governance work and translate regulatory requirements into actionable frameworks and roadmaps. You will collaborate with data, infrastructure, identity and application security colleagues to ensure strategy becomes implementable requirements.

The role includes guiding junior practitioners, leading client workshops, and delivering governance artifacts, risk registers, and policy templates.