Cyber AI Governance and Privacy Senior Consultant

Deloitte Deloitte · Consulting

Senior Consultant role focused on operationalizing responsible AI, particularly agentic AI and LLM-enabled applications. The role involves designing governance operating models, building AI system inventories, conducting risk assessments, establishing technical control guidance, integrating governance into the SDLC, and implementing evaluation/monitoring workflows. Requires experience in AI governance, data privacy, security risk management, and software development fluency.

What you'd actually do

  1. Designing pragmatic AI governance operating models (intake, risk tiering, approvals, documentation standards, exception handling, and audit readiness) with a focus on GenAI and agentic AI deployments.
  2. Building and maintaining AI system inventories (models, agents, tools, data sources, integrations), with clear ownership, intended use, risk classification, and change-control expectations.
  3. Conducting AI risk assessments for privacy, security, model risk, and misuse—including prompt injection, sensitive data exposure, excessive agency, and overreliance—and translating findings into implementable mitigations.
  4. Establishing technical control guidance for teams building agentic AI solutions: human-in-the-loop patterns, tool access controls, safe retrieval and grounding practices, logging/monitoring, token and data minimization, and incident response playbooks.
  5. Implementing “governance in the workflow” by integrating governance checkpoints into product and engineering delivery (architecture reviews, release gates, evaluation requirements, documentation automation, and evidence capture).

Skills

Required

  • AI governance
  • data privacy
  • security risk management
  • compliance and controls
  • AI product risk
  • model risk management
  • technology risk consulting
  • translating policies and regulatory expectations into operational workflows, artifacts, and controls
  • AI/ML/LLM systems and delivery lifecycles
  • software development fluency
  • Python
  • SQL
  • CI/CD
  • cloud deployment basics
  • privacy program execution and artifacts
  • PIAs/DPIAs
  • vendor reviews
  • data inventories
  • data minimization
  • retention
  • access control principles
  • communication with technical and non-technical stakeholders
  • executive-ready reporting

What the JD emphasized

  • operationalize responsible AI
  • agentic AI
  • LLM-enabled applications
  • controls-as-code
  • measurable evaluation and monitoring workflows
  • governance checkpoints
  • AI governance
  • data privacy
  • security risk management
  • AI product risk
  • model risk management
  • technology risk consulting
  • privacy program execution
  • AI/ML/LLM systems
  • agentic AI solutions
  • evaluation and monitoring approaches for GenAI systems

Other signals

  • operationalize responsible AI
  • controls-as-code
  • measurable evaluation and monitoring workflows
  • integrate governance checkpoints into product and engineering delivery