Job Title:  T&T | Cyber: CST | Deputy Manager | AI Security, risk & control metrics management | Pune

The Team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks: Learn more about Cyber | Deloitte

Your Work Profile:

Designs and implements security, governance, and compliance controls to protect AI models, data, and infrastructure throughout their lifecycle. Strong knowledge of AI platforms, models, and security ( AWS/GCP/Azure) . Experience in AI solution security design.AI security consultant would play a critical role in AI security capabilities across the clients.

Key Responsibilities:

Assess and develop/uplift governance frameworks ISO/IEC 42001:2023 in alignment with policies, procedure, controls and external compliance requirements.

Cloud native Data and AI security services.

AI Security posture management solution configuration and implementation

Implement defences against AI-specific attacks (adversarial, prompt injection, data leakage)

Conduct AI security assessments, penetration tests, red team exercises

Analyse AI system vulnerabilities, develop mitigation strategies, and create AI risk heat maps

Implement security controls throughout the AI/ML lifecycle which includes guardrails and adversarial testing to ensure secure design, deployment, and runtime protection of Agentic AI

Implement AI specific incident response and develop regulatory playbooks

 4-8 years of experience in cybersecurity (application, cloud and data security) with tool deployment such as Cisco AI defense, AI security posture management

understanding of AI-specific threat vectors (adversarial attacks, prompt injection, data leakage).

Hands-on experience developing or securing AI agents

Certified AI/LLM cybersecurity professionals

Data protection and AI application security tools

Strong understanding of LLMs, prompt engineering, data exfiltration, hallucinations and model abuse .

Knowledge of regulatory frameworks (NIST AI RMF, EU AI Act)