Senior Security & Risk Architect: Cloud & AI Security

L.E.K. Consulting; Boston (MA); Hybrid; USD 130,000 - 150,000; Full time

Job summary

L.E.K. Consulting is seeking a Security & Risk Architect to advance the firm’s cybersecurity strategy across infrastructure, cloud, applications, and AI security.

You will partner with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, and secure software development practices. The role emphasizes governance under NIST and ISO 27001, with a focus on Active Directory, Azure, Entra ID, and cloud security, while supporting a

Qualifications

• Bachelor’s degree or equivalent experience required.
• 3+ years in Information Security and 6+ years in IT overall.
• Experience with enterprise security technologies and cloud security platforms.
• Familiarity with NIST and ISO 27001.
• Knowledge of SAST, DAST, SCA and secure coding practices.
• AI security governance understanding and experience preferred.

Responsibilities

• Lead Security Operations and Risk Management activities.
• Architect and optimize enterprise security tooling and platforms.
• Oversee vulnerability management, reporting and remediation coordination.
• Integrate security into the software development lifecycle and CI/CD pipelines.
• Govern AI security practices and data governance with stakeholders.

Skills

Analytical skills

Communication

Leadership

Project management

Adaptability

Strategy execution

Education

Bachelor’s degree or equivalent experience

CISSP / Security+ / CEH preferred

Tools

Azure

Active Directory

Entra ID

Endpoint security

Job description

L.E.K. Consulting is seeking a Security & Risk Architect to advance the firm’s cybersecurity strategy across infrastructure, cloud, applications, and AI security.

You will partner with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, and secure software development practices. The role emphasizes governance under NIST and ISO 27001, with a focus on Active Directory, Azure, Entra ID, and cloud security, while supporting a