AI Security Manager

About the role

As an AI Security Manager within McKinsey’s AI Security function, you will drive the secure, responsible, and scalable adoption of artificial intelligence across the firm’s products and services. Reporting to the Head of AI Security, you will partner with security, engineering, product, and risk teams to translate emerging AI threats into practical controls and guidance.

Key responsibilities

• Design, operationalize and embed security controls throughout the AI lifecycle, including threat modeling, security reviews and red‑team evaluations.
• Translate AI‑specific risks such as prompt injection, data leakage and unsafe tool execution into design patterns, testing approaches and governance guidance.
• Define and implement controls for secure agentic AI, covering authentication, authorization and continuous monitoring.

Required profile

• 5+ years of experience in information, product or cloud security with a strong background in secure SDLC and DevSecOps.
• Hands‑on expertise in cloud platforms (AWS, Azure, GCP) and modern architectures such as microservices, serverless, APIs and containers.

Required skills

• AWS, Azure, GCP
• Microservices, serverless, APIs, containers
• OAuth, OIDC, IAM, token scopes, secrets management
• Threat modeling (STRIDE, MAESTRO)
• SAST, DAST, vulnerability and secrets scanning

What we offer

• Continuous learning through structured programs, mentorship and fast‑paced feedback.
• A global community of colleagues across 65+ countries fostering diverse perspectives.
• Competitive salary and comprehensive benefits supporting holistic well‑being.