Manager – Security & Technology Risk Management and AI Assurance

The IT Risk Management team specializes in identifying, assessing, and mitigating technology-related risks while helping organizations strengthen governance, security, compliance, and operational resilience. Leveraging deep expertise across IT Risk, Cyber Security, Assurance, and emerging technologies, the team supports leading organizations in Israel and globally, including major financial institutions, technology companies, and multinational enterprises. Our projects include collaborations with Deloitte US and engagements with some of the largest organizations in Israel and abroad.

Role Overview

We are seeking an experienced Manager to lead and oversee multiple client engagements across IT and Security Risk Management, SOC2, ISO27001, ISO 42001 and AI Assurance. The ideal candidate will bring a strong combination of technical expertise, risk management capabilities, and leadership skills, with the ability to manage complex projects, lead teams, and serve as a trusted advisor to senior client stakeholders.

This role requires a holistic business and technology perspective, the ability to manage multiple engagements, and experience driving high-quality delivery in dynamic environments.

Key Responsibilities:

• Lead and manage end-to-end client engagements across IT and Security Risk Management, SOC2, ISO27001, ISO 42001 and AI Assurance services.
• Oversee planning, execution, quality assurance, and reporting activities while ensuring projects are delivered on time and within budget.
• Lead SOC 2 engagements, implementation projects, and attestation engagements.
• Manage external and internal IT audits, information security reviews, technology risk assessments, and governance, risk, and compliance (GRC) initiatives.
• Advise clients on Cyber Security frameworks, risk management programs, cloud security controls, and regulatory compliance requirements.
• Lead AI Assurance engagements, including governance assessments, AI risk management frameworks, control design and effectiveness reviews, and responsible AI implementation programs.
• Manage multiple projects simultaneously, including resource planning, budgeting, stakeholder management, and engagement profitability.
• Mentor and develop team members, providing coaching, performance feedback, and professional growth opportunities.
• Build and maintain strong client relationships, serving as a trusted advisor to senior management and executive stakeholders.
• Contribute to business development initiatives, proposal development, and the expansion of the team's Cyber, IT Risk, and AI Assurance offerings.

Qualifications:

• Minimum of 5 years of professional experience in IT Risk Management, Cyber Security, IT Audit, SOC Reporting, GRC, AI Risk Management, or related fields.
• Experience managing multiple projects and teams simultaneously in a consulting or professional services environment.
• Strong understanding of SOC 2, Information Security frameworks, IT controls, Cyber Security governance, and risk management methodologies.
• Experience with AI governance, AI assurance, AI risk management, or implementation of AI-based risk and compliance solutions is highly preferred.
• Excellent project management, stakeholder management, and leadership skills.
• Strong written and verbal communication skills in English.
• Relevant certifications such as CISA, CISSP, CRISC, CISM, ISO 27001 Lead Auditor, CPA, or equivalent - an advantage.
• Bachelor's degree in Information Systems, Computer Science, Accounting, Engineering, Cyber Security, or a related field – an advantage.

* We at Deloitte believe that diversity and inclusion among our people is a critical component of our success and that is why we cultivate an organizational culture that contains and embraces diversity in all its forms.