Skip to main content
Welcome to Deloitte

If we have selected the wrong experience for you, please change it above.

Andrew Douglas

Attack Service Management Offering Leader | Deloitte & Touche LLP

Andrew serves as the Attack Service Management Offering Leader for the US in Deloitte's Cyber practice.

Andrew Douglas helps clients reduce their attack surface across all technology layers, including building defensive and offensive security programs. He assists clients to design, build, and operate these programs, with an emphasis on AI enablement.

Andrew, a Managing Director at Deloitte & Touche LLP, is the US Attack Surface Management leader within the Cyber Defense & Resiliency practice, where he focuses on helping clients know, assess, and reduce their attack surface across all technology layers, including building defensive and offensive security programs. He leads large-scale engagements to design, build, and operate these programs, with an emphasis on cloud enablement. As part of Deloitte’s next-generation cyber engineering efforts, he leads the development of Continuous Exposure Management (CTEM) tooling for client service delivery and deployment.

He has more than 25 years of experience with Deloitte globally, performing consultative cybersecurity services for clients across industries. His experience includes leading large-scale cyber internal audits, red teaming, cloud assessment, penetration testing, and vulnerability assessments for clients in financial services, technology, life sciences, health care, and other industries, as well as broader cybersecurity strategy, program, and capability assessments.