Lead
verified Jun 12, 2026posted 3 months ago
Job description
Location Atlanta, Boston, Chicago, Houston, Los Angeles, New York, San Francisco /*generated inline style */ Job Description About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.Overview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies. This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards. The IT team is prioritizing hiring in Boston and / or Chicago. Responsibilities: Security Operations & Risk Management Identify, assess, and respond to cybersecurity and privacy risks across the organization Serve as a technical escalation point for security incidents, investigations, and threat response activities Support incident response, digital forensics, and coordination during critical security events Monitor threat intelligence and recommend proactive risk mitigation strategies Security Architecture & Tooling Lead the management and optimization of enterprise security tools and platformsEvaluate security technologies, identify capability gaps, and recommend improvementsManage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environmentsEnsure systems and infrastructure maintain secure and hardened configurations Vulnerability & Compliance Management Oversee vulnerability management processes, reporting, and remediation coordinationConfigure and maintain security monitoring, reporting, and compliance metricsDrive continuous improvement initiatives across security processes, tools, and policiesSupport disaster recovery, backup oversight, and operational resilience efforts Application Security & Secure Development Integrate security requirements into the software development lifecyclePartner with development teams to implement secure-by-design practices within CI/CD pipelinesLead application security reviews, code analysis, and penetration testing activitiesPromote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworksManage third-party and open-source software risk, including supply chain security controls AI Security & Governance Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAIEstablish controls for AI usage, access management, and data governanceMonitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threatsPartner with legal, compliance, and business stakeholders to develop responsible AI usage policies Qualifications: Bachelor’s degree or equivalent experience6+ years of experience in Information Technology, including 3+ years in Information SecurityExperience with enterprise security technologies and cloud security platformsFamiliarity with cybersecurity frameworks such as NIST and ISO 27001Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practicesUnderstanding of AI/ML security risks and governance principlesRelevant certifications such as CISSP, Security+, or CEH are preferred Skills & Competencies Strong analytical and problem-solving skillsExcellent communication and stakeholder management abilitiesAbility to lead initiatives and mentor junior team membersStrong organizational and project management skillsAdaptability in a fast-paced, evolving environmentAbility to influence technical strategy and drive cross-functional security initiatives Additional Information: The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package. L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits. This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month. Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization. L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances. For more information and to apply, please visit: https://www.lek.com/careers/apply #LI-DE1 /*generated inline style */ /*generated inline style */Location Atlanta, Boston, Chicago, Houston, Los Angeles, New York, San Francisco /*generated inline style */ Job Description About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.Overview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies. This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards. The IT team is prioritizing hiring in Boston and / or Chicago. Responsibilities: Security Operations & Risk Management Identify, assess, and respond to cybersecurity and privacy risks across the organization Serve as a technical escalation point for security incidents, investigations, and threat response activities Support incident response, digital forensics, and coordination during critical security events Monitor threat intelligence and recommend proactive risk mitigation strategies Security Architecture & Tooling Lead the management and optimization of enterprise security tools and platformsEvaluate security technologies, identify capability gaps, and recommend improvementsManage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environmentsEnsure systems and infrastructure maintain secure and hardened configurations Vulnerability & Compliance Management Oversee vulnerability management processes, reporting, and remediation coordinationConfigure and maintain security monitoring, reporting, and compliance metricsDrive continuous improvement initiatives across security processes, tools, and policiesSupport disaster recovery, backup oversight, and operational resilience efforts Application Security & Secure Development Integrate security requirements into the software development lifecyclePartner with development teams to implement secure-by-design practices within CI/CD pipelinesLead application security reviews, code analysis, and penetration testing activitiesPromote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworksManage third-party and open-source software risk, including supply chain security controls AI Security & Governance Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAIEstablish controls for AI usage, access management, and data governanceMonitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threatsPartner with legal, compliance, and business stakeholders to develop responsible AI usage policies Qualifications: Bachelor’s degree or equivalent experience6+ years of experience in Information Technology, including 3+ years in Information SecurityExperience with enterprise security technologies and cloud security platformsFamiliarity with cybersecurity frameworks such as NIST and ISO 27001Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practicesUnderstanding of AI/ML security risks and governance principlesRelevant certifications such as CISSP, Security+, or CEH are preferred Skills & Competencies Strong analytical and problem-solving skillsExcellent communication and stakeholder management abilitiesAbility to lead initiatives and mentor junior team membersStrong organizational and project management skillsAdaptability in a fast-paced, evolving environmentAbility to influence technical strategy and drive cross-functional security initiatives Additional Information: The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package. L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits. This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month. Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization. L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances. For more information and to apply, please visit: https://www.lek.com/careers/apply #LI-DE1 /*generated inline style */Location Atlanta, Boston, Chicago, Houston, Los Angeles, New York, San Francisco /*generated inline style */ Job Description About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.Overview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies. This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards. The IT team is prioritizing hiring in Boston and / or Chicago. Responsibilities: Security Operations & Risk Management Identify, assess, and respond to cybersecurity and privacy risks across the organization Serve as a technical escalation point for security incidents, investigations, and threat response activities Support incident response, digital forensics, and coordination during critical security events Monitor threat intelligence and recommend proactive risk mitigation strategies Security Architecture & Tooling Lead the management and optimization of enterprise security tools and platformsEvaluate security technologies, identify capability gaps, and recommend improvementsManage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environmentsEnsure systems and infrastructure maintain secure and hardened configurations Vulnerability & Compliance Management Oversee vulnerability management processes, reporting, and remediation coordinationConfigure and maintain security monitoring, reporting, and compliance metricsDrive continuous improvement initiatives across security processes, tools, and policiesSupport disaster recovery, backup oversight, and operational resilience efforts Application Security & Secure Development Integrate security requirements into the software development lifecyclePartner with development teams to implement secure-by-design practices within CI/CD pipelinesLead application security reviews, code analysis, and penetration testing activitiesPromote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworksManage third-party and open-source software risk, including supply chain security controls AI Security & Governance Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAIEstablish controls for AI usage, access management, and data governanceMonitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threatsPartner with legal, compliance, and business stakeholders to develop responsible AI usage policies Qualifications: Bachelor’s degree or equivalent experience6+ years of experience in Information Technology, including 3+ years in Information SecurityExperience with enterprise security technologies and cloud security platformsFamiliarity with cybersecurity frameworks such as NIST and ISO 27001Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practicesUnderstanding of AI/ML security risks and governance principlesRelevant certifications such as CISSP, Security+, or CEH are preferred Skills & Competencies Strong analytical and problem-solving skillsExcellent communication and stakeholder management abilitiesAbility to lead initiatives and mentor junior team membersStrong organizational and project management skillsAdaptability in a fast-paced, evolving environmentAbility to influence technical strategy and drive cross-functional security initiatives Additional Information: The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package. L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits. This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month. Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization. L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances. For more information and to apply, please visit: https://www.lek.com/careers/apply #LI-DE1 /*generated inline style */Location Atlanta, Boston, Chicago, Houston, Los Angeles, New York, San Francisco /*generated inline style */ Job Description About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.Overview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies. This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards. The IT team is prioritizing hiring in Boston and / or Chicago. Responsibilities: Security Operations & Risk Management Identify, assess, and respond to cybersecurity and privacy risks across the organization Serve as a technical escalation point for security incidents, investigations, and threat response activities Support incident response, digital forensics, and coordination during critical security events Monitor threat intelligence and recommend proactive risk mitigation strategies Security Architecture & Tooling Lead the management and optimization of enterprise security tools and platformsEvaluate security technologies, identify capability gaps, and recommend improvementsManage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environmentsEnsure systems and infrastructure maintain secure and hardened configurations Vulnerability & Compliance Management Oversee vulnerability management processes, reporting, and remediation coordinationConfigure and maintain security monitoring, reporting, and compliance metricsDrive continuous improvement initiatives across security processes, tools, and policiesSupport disaster recovery, backup oversight, and operational resilience efforts Application Security & Secure Development Integrate security requirements into the software development lifecyclePartner with development teams to implement secure-by-design practices within CI/CD pipelinesLead application security reviews, code analysis, and penetration testing activitiesPromote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworksManage third-party and open-source software risk, including supply chain security controls AI Security & Governance Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAIEstablish controls for AI usage, access management, and data governanceMonitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threatsPartner with legal, compliance, and business stakeholders to develop responsible AI usage policies Qualifications: Bachelor’s degree or equivalent experience6+ years of experience in Information Technology, including 3+ years in Information SecurityExperience with enterprise security technologies and cloud security platformsFamiliarity with cybersecurity frameworks such as NIST and ISO 27001Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practicesUnderstanding of AI/ML security risks and governance principlesRelevant certifications such as CISSP, Security+, or CEH are preferred Skills & Competencies Strong analytical and problem-solving skillsExcellent communication and stakeholder management abilitiesAbility to lead initiatives and mentor junior team membersStrong organizational and project management skillsAdaptability in a fast-paced, evolving environmentAbility to influence technical strategy and drive cross-functional security initiatives Additional Information: The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package. L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits. This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month. Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization. L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances. For more information and to apply, please visit: https://www.lek.com/careers/apply #LI-DE1 /*generated inline style */Location Atlanta, Boston, Chicago, Houston, Los Angeles, New York, San FranciscoLocationAtlanta, Boston, Chicago, Houston, Los Angeles, New York, San FranciscoAtlanta, Boston, Chicago, Houston, Los Angeles, New York, San FranciscoJob Description About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.Overview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies. This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards. The IT team is prioritizing hiring in Boston and / or Chicago. Responsibilities: Security Operations & Risk Management Identify, assess, and respond to cybersecurity and privacy risks across the organization Serve as a technical escalation point for security incidents, investigations, and threat response activities Support incident response, digital forensics, and coordination during critical security events Monitor threat intelligence and recommend proactive risk mitigation strategies Security Architecture & Tooling Lead the management and optimization of enterprise security tools and platformsEvaluate security technologies, identify capability gaps, and recommend improvementsManage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environmentsEnsure systems and infrastructure maintain secure and hardened configurations Vulnerability & Compliance Management Oversee vulnerability management processes, reporting, and remediation coordinationConfigure and maintain security monitoring, reporting, and compliance metricsDrive continuous improvement initiatives across security processes, tools, and policiesSupport disaster recovery, backup oversight, and operational resilience efforts Application Security & Secure Development Integrate security requirements into the software development lifecyclePartner with development teams to implement secure-by-design practices within CI/CD pipelinesLead application security reviews, code analysis, and penetration testing activitiesPromote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworksManage third-party and open-source software risk, including supply chain security controls AI Security & Governance Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAIEstablish controls for AI usage, access management, and data governanceMonitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threatsPartner with legal, compliance, and business stakeholders to develop responsible AI usage policies Qualifications: Bachelor’s degree or equivalent experience6+ years of experience in Information Technology, including 3+ years in Information SecurityExperience with enterprise security technologies and cloud security platformsFamiliarity with cybersecurity frameworks such as NIST and ISO 27001Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practicesUnderstanding of AI/ML security risks and governance principlesRelevant certifications such as CISSP, Security+, or CEH are preferred Skills & Competencies Strong analytical and problem-solving skillsExcellent communication and stakeholder management abilitiesAbility to lead initiatives and mentor junior team membersStrong organizational and project management skillsAdaptability in a fast-paced, evolving environmentAbility to influence technical strategy and drive cross-functional security initiatives Additional Information: The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package. L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits. This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month. Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization. L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances. For more information and to apply, please visit: https://www.lek.com/careers/apply #LI-DE1Job DescriptionAbout L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.Overview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies. This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards. The IT team is prioritizing hiring in Boston and / or Chicago. Responsibilities: Security Operations & Risk Management Identify, assess, and respond to cybersecurity and privacy risks across the organization Serve as a technical escalation point for security incidents, investigations, and threat response activities Support incident response, digital forensics, and coordination during critical security events Monitor threat intelligence and recommend proactive risk mitigation strategies Security Architecture & Tooling Lead the management and optimization of enterprise security tools and platformsEvaluate security technologies, identify capability gaps, and recommend improvementsManage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environmentsEnsure systems and infrastructure maintain secure and hardened configurations Vulnerability & Compliance Management Oversee vulnerability management processes, reporting, and remediation coordinationConfigure and maintain security monitoring, reporting, and compliance metricsDrive continuous improvement initiatives across security processes, tools, and policiesSupport disaster recovery, backup oversight, and operational resilience efforts Application Security & Secure Development Integrate security requirements into the software development lifecyclePartner with development teams to implement secure-by-design practices within CI/CD pipelinesLead application security reviews, code analysis, and penetration testing activitiesPromote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworksManage third-party and open-source software risk, including supply chain security controls AI Security & Governance Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAIEstablish controls for AI usage, access management, and data governanceMonitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threatsPartner with legal, compliance, and business stakeholders to develop responsible AI usage policies Qualifications: Bachelor’s degree or equivalent experience6+ years of experience in Information Technology, including 3+ years in Information SecurityExperience with enterprise security technologies and cloud security platformsFamiliarity with cybersecurity frameworks such as NIST and ISO 27001Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practicesUnderstanding of AI/ML security risks and governance principlesRelevant certifications such as CISSP, Security+, or CEH are preferred Skills & Competencies Strong analytical and problem-solving skillsExcellent communication and stakeholder management abilitiesAbility to lead initiatives and mentor junior team membersStrong organizational and project management skillsAdaptability in a fast-paced, evolving environmentAbility to influence technical strategy and drive cross-functional security initiatives Additional Information: The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package. L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits. This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month. Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization. L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances. For more information and to apply, please visit: https://www.lek.com/careers/apply #LI-DE1About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.Overview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies. This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards. The IT team is prioritizing hiring in Boston and / or Chicago. Responsibilities: Security Operations & Risk Management Identify, assess, and respond to cybersecurity and privacy risks across the organization Serve as a technical escalation point for security incidents, investigations, and threat response activities Support incident response, digital forensics, and coordination during critical security events Monitor threat intelligence and recommend proactive risk mitigation strategies Security Architecture & Tooling Lead the management and optimization of enterprise security tools and platformsEvaluate security technologies, identify capability gaps, and recommend improvementsManage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environmentsEnsure systems and infrastructure maintain secure and hardened configurations Vulnerability & Compliance Management Oversee vulnerability management processes, reporting, and remediation coordinationConfigure and maintain security monitoring, reporting, and compliance metricsDrive continuous improvement initiatives across security processes, tools, and policiesSupport disaster recovery, backup oversight, and operational resilience efforts Application Security & Secure Development Integrate security requirements into the software development lifecyclePartner with development teams to implement secure-by-design practices within CI/CD pipelinesLead application security reviews, code analysis, and penetration testing activitiesPromote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworksManage third-party and open-source software risk, including supply chain security controls AI Security & Governance Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAIEstablish controls for AI usage, access management, and data governanceMonitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threatsPartner with legal, compliance, and business stakeholders to develop responsible AI usage policies Qualifications: Bachelor’s degree or equivalent experience6+ years of experience in Information Technology, including 3+ years in Information SecurityExperience with enterprise security technologies and cloud security platformsFamiliarity with cybersecurity frameworks such as NIST and ISO 27001Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practicesUnderstanding of AI/ML security risks and governance principlesRelevant certifications such as CISSP, Security+, or CEH are preferred Skills & Competencies Strong analytical and problem-solving skillsExcellent communication and stakeholder management abilitiesAbility to lead initiatives and mentor junior team membersStrong organizational and project management skillsAdaptability in a fast-paced, evolving environmentAbility to influence technical strategy and drive cross-functional security initiatives Additional Information: The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package. L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits. This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month. Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization. L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances. For more information and to apply, please visit: https://www.lek.com/careers/apply #LI-DE1
About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.
About L.E.K. Consulting:About L.E.K. Consulting:L.E.K. Consulting is a premier global strategy consulting firm that partners with clients to solve their most critical business challenges and deliver high-impact outcomes. We bring deep industry expertise and rigorous, evidence-based insight to global corporations, growth companies and private equity investors, helping them turn strategy into action.How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.
How do we deliver impact? It’s the people. We hire exceptional individuals and invest in their growth through hands-on client work, close collaboration and a culture of ownership, inclusion and continuous learning. Across every level, curiosity unites us and challenge excites us.Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visit lek.com.
Founded more than 40 years ago, L.E.K. employs more than 2,200 professionals worldwide and is consistently recognized as one of the industry's best firms to work for. For more information, visitlek.com.lek.com.lek.comOverview of Role: The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies.
Overview of Role:Overview of Role:The Security & Risk Architect is a senior technical leader within the Information Security team, responsible for advancing the firm’s cybersecurity strategy and strengthening enterprise security capabilities across infrastructure, cloud platforms, applications, and emerging AI technologies.This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards.
This role partners closely with IT, engineering, and business stakeholders to manage security operations, vulnerability management, incident response, secure software development practices, and AI security governance. The position supports a global environment aligned to the NIST Cybersecurity Framework and ISO 27001 standards.The IT team is prioritizing hiring in Boston and / or Chicago.
The IT team is prioritizing hiring in Boston and / or Chicago.Responsibilities: Security Operations & Risk Management
Responsibilities:Responsibilities:Security Operations & Risk Management- Identify, assess, and respond to cybersecurity and privacy risks across the organization
- Serve as a technical escalation point for security incidents, investigations, and threat response activities
- Support incident response, digital forensics, and coordination during critical security events
- Monitor threat intelligence and recommend proactive risk mitigation strategies
Security Architecture & Tooling
Security Architecture & Tooling- Lead the management and optimization of enterprise security tools and platforms
- Evaluate security technologies, identify capability gaps, and recommend improvements
- Manage security controls across Active Directory, Azure, Entra ID, endpoint security, and cloud environments
- Ensure systems and infrastructure maintain secure and hardened configurations
Vulnerability & Compliance Management
Vulnerability & Compliance Management- Oversee vulnerability management processes, reporting, and remediation coordination
- Configure and maintain security monitoring, reporting, and compliance metrics
- Drive continuous improvement initiatives across security processes, tools, and policies
- Support disaster recovery, backup oversight, and operational resilience efforts
Application Security & Secure Development
Application Security & Secure Development- Integrate security requirements into the software development lifecycle
- Partner with development teams to implement secure-by-design practices within CI/CD pipelines
- Lead application security reviews, code analysis, and penetration testing activities
- Promote secure coding standards aligned with OWASP, NIST, and ISO 27001 frameworks
- Manage third-party and open-source software risk, including supply chain security controls
AI Security & Governance
AI Security & Governance- Support governance and security oversight for AI platforms and tools, including Microsoft Copilot and Azure OpenAI
- Establish controls for AI usage, access management, and data governance
- Monitor emerging AI security risks, including prompt injection, adversarial behavior, and data exposure threats
- Partner with legal, compliance, and business stakeholders to develop responsible AI usage policies
Qualifications:
Qualifications:Qualifications:- Bachelor’s degree or equivalent experience
- 6+ years of experience in Information Technology, including 3+ years in Information Security
- Experience with enterprise security technologies and cloud security platforms
- Familiarity with cybersecurity frameworks such as NIST and ISO 27001
- Knowledge of application security concepts, including SAST, DAST, SCA, and secure coding practices
- Understanding of AI/ML security risks and governance principles
- Relevant certifications such as CISSP, Security+, or CEH are preferred
Skills & Competencies
Skills & Competencies- Strong analytical and problem-solving skills
- Excellent communication and stakeholder management abilities
- Ability to lead initiatives and mentor junior team members
- Strong organizational and project management skills
- Adaptability in a fast-paced, evolving environment
- Ability to influence technical strategy and drive cross-functional security initiatives
Additional Information:
Additional Information:Additional Information:- The expected base salary range for this position is $130,000 – $150,000 annually. Actual compensation will be determined based on experience, qualifications, skills, and location. This position may also be eligible for discretionary bonus and a comprehensive benefits package.
- L.E.K. Consulting offers a competitive total rewards package including medical, dental, vision, life and disability insurance, 401(k) with employer contribution, HSA contributions (where applicable), paid time off, and other firm-sponsored benefits.
- This role is based in any of our U.S. office and follows our hybrid work model for U.S. offices. We require employees to be in their assigned home office Tuesday, Wednesday, and Thursday each week, as well as the first Friday of each month.
- Applicants must be legally authorized to work in the United States on a permanent basis without the need for employer sponsorship. Unfortunately, we are unable to consider candidates requiring visa sponsorship, including but not limited to H-1B, TN, F-1 (OPT/CPT/STEM), or other work authorization.
- L.E.K. Consulting is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all qualified individuals regardless of race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
- In accordance with applicable state and local laws, we will provide reasonable accommodations for qualified individuals with disabilities and for sincerely held religious beliefs, practices, or observances.
- For more information and to apply, please visit: https://www.lek.com/careers/apply
#LI-DE1
#LI-DE1View cookie policy window.onload = function() { if (WCN.labels.ACCESSIBILITY_STATEMENT_FULL_TEXT) { var url = "https://lek.tal.net/vx/lang-en-GB/mobile-0/appcentre-2/brand-2/xf-f4b9fab2d554/candidate/accessibility_statement"; document.getElementById("accessibility-statement").innerHTML = "Accessibility Statement"; } } .st0{fill:#00B852;} .st1{fill:#50575C;} LinkedIn Twitter Instagram Youtube Facebook Insights Industries Capabilities Leaders Careers Offices Contact Us © 2024 L.E.K. Consulting Privacy Notice and Legal Modern Slavery and Human Trafficking Statement Policy for Recruitment Agencies .st0{fill:#00B852;} .st1{fill:#50575C;} LinkedIn Twitter Instagram Youtube Facebook (function(){ $(document).ready(function() { $("#vac_desc form").submit(function () { var buttons = document.getElementsByClassName("submit_button"); var l = buttons.length; for (i = 0; i < l; i++) { buttons[i].style.display = "none"; } return true; }); }); WCN.labels({ UPDATE_VALUE : "Update Value", DBICPKG_RECRUITER_FORM_SUBMIT : "Add", DBICPKG_RECRUITER_FORM_FIRSTNAME : "First Name", DBICPKG_RECRUITER_FORM_LASTNAME : "Last Name", DBICPKG_RECRUITER_FORM_EMAIL : "Email", CHOOSE_ONE: "Choose one...", UNSAVED_ASYNC_VIDEO: "Some of your video answer are still beind uploaded. If you leave the page now you risk losing them and not being allowed to record new ones. Do you want to leave anyway ?", LOST_VIDEO_ON_LEAVE: "If you leave the page you will lose your chance to record this answer! Do you want to leave anyway ?", }); $('#form_3863e91a-2278-44ea-a83d-378a3630204c').trigger('eform.new_form_data_ready',{ 'id': 'form_3863e91a-2278-44ea-a83d-378a3630204c', 'mode': 'view', 'form_instance': '1', 'form_action': '', 'form_base_url': '', 'wrapping_container': '', 'enable_validation': true, 'lazzy_validation' : false, 'enable_select2' : false, 'media_action' : 'https://lek.tal.net/vx/lang-en-GB/mobile-0/appcentre-2/brand-2/xf-f4b9fab2d554/candidate/so/pm/1/pl/6/opp/4005/media_details', 'validate_on_submit' : false }); $(document).ready(function() { var params = {}; params['location'] = 'opportunity'; WCN.candidateAdverts.get('.right-column', params); }); WCN.cookiePreferences.gdprExpiryTimeDays = 182; // update cookie expiry time: WCN.cookiePreferences.set(); if (WCN.cookiePreferences.showBanner()) { $('html').addClass('cookies-banner-present') $('#cookies-banner').fadeIn('slow'); } $('#cookies-accept-button').click(function () { WCN.cookiePreferences.set('hide_banner', 1); WCN.cookiePreferences.set('tracking_services', 1); if (/candidate\/cookie_policy$/.test(location)) { location.reload(); } includeGTM(); $('#cookies-banner').fadeOut('slow'); $('html').removeClass('cookies-banner-present'); }); $('#cookies-optout-button').click(function () { WCN.cookiePreferences.set('hide_banner', 1); WCN.cookiePreferences.set('tracking_services', 0); if (/candidate\/cookie_policy$/.test(location)) { location.reload(); } $('#cookies-banner').fadeOut('slow'); $('html').removeClass('cookies-banner-present'); }); })();View cookie policyView cookie policy.st0{fill:#00B852;} .st1{fill:#50575C;} LinkedIn Twitter Instagram Youtube Facebook Insights Industries Capabilities Leaders Careers Offices Contact Us © 2024 L.E.K. Consulting Privacy Notice and Legal Modern Slavery and Human Trafficking Statement Policy for Recruitment Agencies .st0{fill:#00B852;} .st1{fill:#50575C;} LinkedIn Twitter Instagram Youtube Facebook.st0{fill:#00B852;} .st1{fill:#50575C;} LinkedIn Twitter Instagram Youtube Facebook Insights Industries Capabilities Leaders Careers Offices Contact Us © 2024 L.E.K. Consulting Privacy Notice and Legal Modern Slavery and Human Trafficking Statement Policy for Recruitment Agencies .st0{fill:#00B852;} .st1{fill:#50575C;} LinkedIn Twitter Instagram Youtube Facebook.st0{fill:#00B852;} .st1{fill:#50575C;} LinkedIn Twitter Instagram Youtube Facebook.st0{fill:#00B852;} .st1{fill:#50575C;}LinkedIn Twitter Instagram Youtube Facebook- Youtube
- Insights
- Industries
- Capabilities
- Leaders
- Careers
- Offices
- Contact Us
- Youtube
Similar jobs
Lead
posted 2 months ago
Senior
verified Jun 13, 2026posted 3 months ago
Senior
verified Jun 13, 2026posted 3 months ago