Manager / Senior Manager | AI Security, Governance & Risk

This advert was translated automatically from Portuguese. Read the original.

Do you want to join one of the largest professional services organisations on the market? Then Deloitte is for you. Here, you will have the opportunity to boost your career and strengthen your skills in our technology universe. We are an international Tech Hub and we are looking for the best specialists in the areas of AI Security, Agentic AI Security, Runtime Security, AI governance and risk management throughout the lifecycle of AI systems to join our centres of excellence and our community. At Deloitte, you will transform the world as we know it and develop unique and innovative solutions across the most varied and complex transformation projects, from Portugal to the world. We are strengthening our Infrastructure area and we are looking for experienced professionals who have a natural aptitude and enjoyment for working in a team and in a multi-project environment. You can discover all the functions you will perform, according to your profile, to take a leap in your career! Join us? We are waiting for you. Your day-to-day and responsibilities: - Lead projects and initiatives related to the security of AI platforms and applications; Lead projects and initiatives related to the security of AI platforms and applications; - Act as a technical reference in the areas of AI Security, Runtime Security and risk management in AI environments; Act as a technical reference in the areas of AI Security, Runtime Security and risk management in AI environments; - Define security architectures, standards and best practices for models, agents, multi-agent systems, tools, workloads and AI data flows; Define security architectures, standards and best practices for models, agents, multi-agent systems, tools, workloads and AI data flows; - Lead multidisciplinary and highly specialised teams; Lead multidisciplinary and highly specialised teams; - Support clients in the secure design and implementation of GenAI and Agentic AI solutions, including autonomous agents, multi-agent systems, integration with tools and APIs and Model Context Protocol (MCP); Support clients in the secure design and implementation of GenAI and Agentic AI solutions, including autonomous agents, multi-agent systems, integration with tools and APIs and Model Context Protocol (MCP); - Define identity and access control mechanisms, privilege management, data protection, information segregation and secure use of tools by AI agents; Define identity and access control mechanisms, privilege management, data protection, information segregation and secure use of tools by AI agents; - Lead continuous monitoring initiatives, runtime security and the implementation of guardrails to control behaviours, actions, delegations, accesses and tool usage by AI agents; Lead continuous monitoring initiatives, runtime security and the implementation of guardrails to control behaviours, actions, delegations, accesses and tool usage by AI agents; - Define and operationalise AI governance models, including policies, roles and responsibilities, system inventory and classification, approval criteria, human oversight, documentation and traceability; Define and operationalise AI governance models, including policies, roles and responsibilities, system inventory and classification, approval criteria, human oversight, documentation and traceability; - Conduct AI risk and impact assessments, define controls and treatment plans, monitor risk indicators and support incident management throughout the lifecycle; Conduct AI risk and impact assessments, define controls and treatment plans, monitor risk indicators and support incident management throughout the lifecycle; - Translate regulatory requirements and recognised frameworks into technical and organisational controls, supporting maturity, compliance and audit assessments; Translate regulatory requirements and recognised frameworks into technical and organisational controls, supporting maturity, compliance and audit assessments; - Support pre-sales activities and technical solution definition; Support pre-sales activities and technical solution definition; - Identify innovation opportunities and contribute to the development of the AI Security offering. Identify innovation opportunities and contribute to the development of the AI Security offering. - Track market trends, technological evolution and new threats, anticipating clients' future needs. Track market trends, technological evolution and new threats, anticipating clients' future needs. Are you who we are looking for? - Bachelor's or Master's degree in computer engineering, cybersecurity, information systems or similar fields; Bachelor's or Master's degree in computer engineering, cybersecurity, information systems or similar fields; - Proven professional experience in application security, cloud platforms or enterprise infrastructure; Proven professional experience in application security, cloud platforms or enterprise infrastructure; - Solid knowledge of security control architecture and implementation in cloud and hybrid environments; Solid knowledge of security control architecture and implementation in cloud and hybrid environments; - Experience in Identity & Access Management, data protection and application security; Experience in Identity & Access Management, data protection and application security; - Experience in leading teams and managing complex initiatives; Experience in leading teams and managing complex initiatives; - Proven experience in securing GenAI platforms, LLMs and Agentic AI applications, including autonomous agents and multi-agent systems; Proven experience in securing GenAI platforms, LLMs and Agentic AI applications, including autonomous agents and multi-agent systems; - Solid knowledge of AI Runtime Security, Agent Security, AI Guardrails, Model Governance and Responsible AI; Solid knowledge of AI Runtime Security, Agent Security, AI Guardrails, Model Governance and Responsible AI; - Experience with platforms such as NVIDIA NeMo Guardrails, Azure AI Content Safety, Azure AI Foundry, Google Vertex AI or AWS Bedrock will be valued; Experience with platforms such as NVIDIA NeMo Guardrails, Azure AI Content Safety, Azure AI Foundry, Google Vertex AI or AWS Bedrock will be valued; - Experience in applying AI governance, security and risk management frameworks, namely NIST AI RMF and its GenAI profile, ISO/IEC 42001, EU AI Act and OWASP references for LLMs and Agentic AI applications; Experience in applying AI governance, security and risk management frameworks, namely NIST AI RMF and its GenAI profile, ISO/IEC 42001, EU AI Act and OWASP references for LLMs and Agentic AI applications; - Experience in identifying, assessing and mitigating risks such as prompt injection, jailbreaks, model abuse, data leakage, excessive permissions, misuse of tools, memory manipulation, loss of control and unauthorised autonomous actions; Experience in identifying, assessing and mitigating risks such as prompt injection, jailbreaks, model abuse, data leakage, excessive permissions, misuse of tools, memory manipulation, loss of control and unauthorised autonomous actions; - Experience in implementing AI risk management processes, including risk and impact assessments, control definition and testing, risk indicators, continuous monitoring, incident response and executive reporting; Experience in implementing AI risk management processes, including risk and impact assessments, control definition and testing, risk indicators, continuous monitoring, incident response and executive reporting; - Fluency in English (written and spoken); Fluency in English (written and spoken); - Critical thinking, analytical and problem-solving skills; Critical thinking, analytical and problem-solving skills; - Organisation, planning and quality orientation; Organisation, planning and quality orientation; - Availability to travel as required. Availability to travel as required. Develop a career tailored to you - In a diverse working context that allows for continuous development and learning; In a diverse working context that allows for continuous development and learning; - Through a personalised career development plan (skills/technical and functional opportunities), suited to the moment, your needs and goals; Through a personalised career development plan (skills/technical and functional opportunities), suited to the moment, your needs and goals; - By participating in national and international projects, with relevant scale and impact in this area of specialisation; By participating in national and international projects, with relevant scale and impact in this area of specialisation; - Unlimited access to the largest online learning platforms (LinkedIn Learning and Udemy); Unlimited access to the largest online learning platforms (LinkedIn Learning and Udemy); - Opportunity for training and certifications in the latest technologies, namely Cloud technologies. Opportunity for training and certifications in the latest technologies, namely Cloud technologies. Experience a culture of unity - A culture of innovation and excellence that makes us leaders and pioneers of trends; A culture of innovation and excellence that makes us leaders and pioneers of trends; - A friendly environment of respect, trust, transparency and informality; A friendly environment of respect, trust, transparency and informality; - A lifelong network that keeps you connected to the best knowledge alongside leaders and specialists; A lifelong network that keeps you connected to the best knowledge alongside leaders and specialists; - An opportunity to be part of our communities (Tech, innovation, sport and other interests) and to actively participate in social responsibility projects. An opportunity to be part of our communities (Tech, innovation, sport and other interests) and to actively participate in social responsibility projects. About Deloitte At Deloitte you will never work alone. You will have the opportunity to join various transformation projects and be part of a team that will inspire you and help you develop differentiating solutions, in a dynamic and collaborative environment where you can give your best and benefit from our wellbeing and flexibility initiatives. We are more than 5,500 people in Portugal, of which more than 2,600 work in technology areas, from offices and Digital Studios in Lisbon, Porto, Braga, Viseu, Coimbra and Faro and from technology hubs in Braga. Furthermore, our teams in Portugal have an international reach, which demonstrates our strong global leadership in low code/no code, telecommunications network engineering, organisational transformation technology platforms (ServiceNow and Apptio) and the financial services industry (Finastra, TIA and Guidewire). If you are interested in exploring and developing your skills in any of these areas in technology solutions – software engineering, cloud, systems integration, data analytics & data science, cyber risk, telecommunications network engineering, UX design – and would like to work with technologies such as AWS, Google, Oracle, Salesforce, SAP, Mulesoft, Feedzai and SAS, among others, then