Cyber- DT&P-Strategy; & Architecture - AI Security Analyst

Same job available in 4 locations Bengaluru, Karnataka, India Chennai, Tamil Nadu, India

Hyderabad, Telangana, India

Pune, Maharashtra, India

Position Summary

AI Security Analyst, Strategy and Architecture As an AI Cyber Strategy & Architecture Consultant in Deloitte Cyber for AI practice, you will help clients build the foundational AI security strategies, reference secure AI architectures, and governance frameworks needed to adopt AI securely and at scale. Working alongside experienced architects and senior practitioners, you will contribute to the design and delivery of AI security blueprints, threat models, and compliance alignment programs that span cloud, data, identity, and agentic systems. The role blends rigorous technical analysis with structured client engagement and hands-on delivery.

Work you'll do

As an AI Cyber Strategy and Architecture Analyst, you will be responsible for:

- Translate regulatory and framework requirements, including NIST AI RMF, EU AI Act and ISO 42001 Controls into practical, implementable security controls across AI platforms and data pipelines.
- Assess clients’ AI cybersecurity posture against their business environment, objectives, and risk appetite; identify key strengths and gaps, and develop prioritized recommendations aligned to their constraints and priorities.
- Evaluate AI-specific risks through structured risk assessments and threat modeling, including prompt injection, data leakage, model supply chain compromise, and agentic privilege escalation scenarios.
- Translate assessment findings into enterprise AI security roadmaps by mapping current-state capabilities to target-state architectures, defining required controls, and documenting sequenced remediation actions.
- Contribute to the development, review, and updating of cybersecurity policies, standards, and procedures to incorporate AI-specific risks and controls.
- Contribute to the development of AI security reference architectures covering LLM deployment patterns, RAG pipelines, vector databases, agentic workflows, and model-serving architecture.
- Develop impactful reports and presentations that support the achievement of engagement goals and objectives.
- Collaborate with client engineering, security operations, and business stakeholders to validate architecture decisions and ensure alignment with enterprise security standards.

A successful candidate would possess these skills:
- Takes ownership of assigned workstreams and deliverables, managing time and quality with minimal oversight while keeping senior colleagues informed of progress and blockers.
- Communicates complex technical architecture and risk concepts clearly in written and verbal formats, adapting the level of detail for engineering teams and business stakeholders alike.




- Approaches unfamiliar AI platforms, frameworks, and threat vectors with structured curiosity - decomposing problems, researching quickly, and applying findings to real client contexts.
- Demonstrates a delivery-first mindset, consistently producing high-quality work products on schedule and proactively flagging risks to project timelines.
- Collaborates effectively across multidisciplinary teams spanning AI engineering, cloud security, identity, data, and risk management.

The team Deloitte Cyber for AI practice helps organizations secure generative AI and agentic systems from design through production. The team brings together AI engineering and cyber skills across identity, data, infrastructure, application security and operations.

We work with clients to make security controls part of the platform and delivery lifecycle, so teams can move from experiments to production without creating unmanaged access, data or infrastructure risk.

Within the practice, the Identity capability focuses on how agents, workloads and people are identified, authenticated, authorized and governed across enterprise and cloud environments.

Qualifications

Required

- Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field; alternatively, equivalent demonstrated experience.
- 2+ years of experience in cybersecurity, with demonstrated exposure to technology strategy engagements, risk assessments and security architecture.
- Familiarity with established cybersecurity and AI governance frameworks such as NIST CSF, NIST AI RMF, ISO 42001 or the EU AI Act.
- Experience conducting or contributing to threat modeling, architecture risk assessments, or security gap analyses against defined control frameworks.
- Working knowledge of at least one major cloud platform (AWS, Azure, or Google Cloud), including an understanding of native security services, shared responsibility models, and cloud-native architecture patterns.
- Foundational understanding of AI and machine learning concepts, including how LLMs, RAG pipelines, vector databases, and agentic systems function, and the security risks they introduce.
- Ability to produce clear, structured technical documentation - including architecture diagrams, control mapping matrices, risk registers, and strategy decks - suitable for both engineering and executive audiences.
- Ability to travel 25% to 50%, on average,



based on the work you do and the clients and engagements you serve.

Preferred:
- Previous consulting, client delivery or customer-facing engineering experience.
- Experience across both managed AI services, self-hosted and other AI platforms.
- Excellent communication (verbal and written) and interpersonal skills.
- Hands-on experience developing AI cyber security assessments, AI threat modelling and AI policies and standards development.
- Experience with AI frameworks and regulations including NIST AI RMF, EU AI Act and ISO 42001.
- Relevant certifications such as CISSP, CRISC etc.

#Cyber_Digital Trust & Privacy#CA-TD Our purpose

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work. Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India. Advantages to help you thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of perks.

Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you. Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Requisition code: 371458

📌 Cyber- DT&P-Strategy & Architecture - AI Security Analyst (Hyderabad)
🏢 Deloitte
📍 Hyderabad