AI Security Manager
About the role
then...
. - Responsibilities: The "Work you'll do" bullet list. We'll makeResponsibilities
then- each bullet.
- Requirements: The "Qualifications Required:" list. Could be Requirements or Qualifications. The instruction: Use headings for sections e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we need both Requirements and Qualifications maybe. The posting has "Qualifications Required:" and also "Preferred:" which could be Qualifications? Actually "Qualifications Required:" is required qualifications. "Preferred:" is preferred qualifications. We could treat "Qualifications" heading for required, and maybe "Preferred Qualifications" not a standard heading. But we have only allowed headings list; we could put required under Requirements, and preferred under Qualifications? Or we could combine. The instruction: "Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can include both Requirements and Qualifications sections if content exists. We'll put required qualifications under Requirements, and preferred qualifications under Qualifications. - Skills: The list "A successful candidate would possess these skills:" bullet list. So Skills section. - Benefits: Not explicitly mentioned besides maybe discretionary annual incentive program. There's mention of "You may also be eligible to participate in a discretionary annual incentive program". That's a benefit. Also maybe limited immigration sponsorship. That's a benefit. So we can include Benefits section with those points. - Pay: The wage range: $134,500 to $265,100. Also mention discretionary annual incentive program. So Pay section. - Schedule: Not mentioned. No schedule info. So we omit Schedule. We must not include boilerplate like recruitment end date? That's metadata; we could fold into short p or drop. The instruction: "do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." The recruiting end date is minor metadata; we could include in a short p maybe under About the role or separate? Probably we can include a short p after About the role: "
Recruiting for this role ends on 05/31/2027.
" That's okay. We must not repeat job title as heading. Not include. We must preserve all substantive information; do not invent or summarize away detail. So we need to keep all bullet points exactly as given, but we can rephrase? It says preserve ALL substantive information; do NOT invent or summarize away detail. So we should keep the content verbatim, maybe as bullet points. We'll copy the bullet points. Let's extract bullets: Responsibilities bullets: - Leading AI cybersecurity strategy assessments, governance workshops, and risk operating model design for clients adopting generative artificial intelligence and agentic systems. - Translating business objectives, regulatory obligations, and risk appetite into AI governance frameworks, risk taxonomies, and control operating models. - Advising clients on AI security strategy decisions while reviewing governance artifacts, policy documents, and risk assessments developed by engagement teams. - Managing engagement scope, teams, milestones, quality, and client expectations across strategy-led AI security programs. - Coordinating with Data, Infrastructure, Identity, Application Security, and Security Operations leaders to help translate strategic recommendations into implementable technical requirements, and technical considerations into strategic decisions. - Shaping solutions during pursuits through workshops, executive briefings, proposals, estimates, and delivery plans, while developing reusable cyber strategy assets including security controls, governance frameworks, maturity models, risk taxonomies, and playbooks, and coaching practitioners on advisory quality. Skills bullets: - Ability to work independently and collaborate as part of a team - Effective written and verbal communication skills - Meticulous attention to detail and quality of work product - Ability to build and sustain professional relationships - Ability to lead projects or workstreams - Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment - Strong interpersonal skills and professional demeanor - Ability to meet deadlines - Ability to mentor and provide clear guidance to others Qualifications Required bullets: - Bachelor's degree or equivalent demonstrated experience in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management - 8+ years of cybersecurity, risk management, or technology consulting experience, including experience advising on artificial intelligence, machine learning, or emerging technology risk - Experience designing AI governance frameworks, risk operating models, or security strategy programs for enterprise clients - Experience with AI and machine learning architectures, risks of generative artificial intelligence and agentic systems, and one or more of the following: National Institute of Standards and Technology Artificial Intelligence Risk Management Framework, International Organization for Standardization/International Electrotechnical Commission 42001, Open Worldwide Application Security Project Large Language Model Top 10, MITRE ATLAS, or the European Union Artificial Intelligence Act - Experience leading client-facing advisory or risk engagements and coordinating cross-functional workstreams across identity, data, infrastructure, security operations, and application security - Ability to travel 25%-50%, on average, based on the work you do and the clients and industries/sectors you serve. - Limited immigration sponsorship may be available. Preferred bullets: - Experience building AI cybersecurity controls, control guidance, governance operating models, risk committees, or intake and approval processes for enterprise AI programs - Experience with governance, risk, and compliance platforms, AI governance tools, or model risk management systems - Experience with AI threat modeling, red teaming, security evaluations, or secure AI development practices - Experience building reusable strategy assets, delivery methods, or advisory frameworks used across multiple engagements - Experience with machine learning lifecycle tools or frameworks such as PyTorch, TensorFlow, or MLflow - One or more of the following certifications: Certified Information Systems Security Professional, Certified Information Security Manager, Certified Data Privacy Solutions Engineer, Artificial Intelligence Governance Professional, or International Organization for Standardization/International Electrotechnical Commission 42001 Lead Implementer or Lead Auditor Pay: The wage range: $134,500 to $265,100. Also mention discretionary annual incentive program. We could put Pay section with that info. Benefits: discretionary annual incentive program, limited immigration sponsorship maybe also benefit. But immigration sponsorship already in qualifications required; but it's also a benefit. We'll include it under Benefits. We need to avoid duplication. The immigration sponsorship appears in Qualifications Required; we could keep it there but also mention under Benefits? Might be duplication. Better to keep it only once. Since it's under Qualifications Required as a note, we can keep it there. Benefits: discretionary annual incentive program. We also have "You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance." That's benefit. Thus Benefits section:You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Now About the role: The initial paragraph: "Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. As a Manager, Strategy, Growth & Transformation specializing in Strategy in Deloitte's Cyber for AI practice, you will lead client engagements that help enterprises understand the cybersecurity and enterprise risks of adopting AI and define how they will govern, manage and secure it. You will translate business, risk and regulatory objectives into cybersecurity controls, governance frameworks and risk operating models, remain directly involved in critical strategic decisions, and guide teams from assessment through implementation alongside the practice's Data, Infrastructure, Identity, Security Operations and Application Security capabilities. You will also shape solutions during pursuits and help build repeatable delivery assets." We'll put that as...
. Add recruiting end date as short p maybe after About the role. Now construct HTML. We must not include or . Just fragment. Let's produce:About the role
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. As a Manager, Strategy, Growth & Transformation specializing in Strategy in Deloitte's Cyber for AI practice, you will lead client engagements that help enterprises understand the cybersecurity and enterprise risks of adopting AI and define how they will govern, manage and secure it. You will translate business, risk and regulatory objectives into cybersecurity controls, governance frameworks and risk operating models, remain directly involved in critical strategic decisions, and guide teams from assessment through implementation alongside the practice's Data, Infrastructure, Identity, Security Operations and Application Security capabilities. You will also shape solutions during pursuits and help build repeatable delivery assets.
Recruiting for this role ends on 05/31/2027.
Responsibilities
- Leading AI cybersecurity strategy assessments, governance workshops, and risk operating model design for clients adopting generative artificial intelligence and agentic systems.
- Translating business objectives, regulatory obligations, and risk appetite into AI governance frameworks, risk taxonomies, and control operating models.
- Advising clients on AI security strategy decisions while reviewing governance artifacts, policy documents, and risk assessments developed by engagement teams.
- Managing engagement scope, teams, milestones, quality, and client expectations across strategy-led AI security programs.
- Coordinating with Data, Infrastructure, Identity, Application Security, and Security Operations leaders to help translate strategic recommendations into implementable technical requirements, and technical considerations into strategic decisions.
- Shaping solutions during pursuits through workshops, executive briefings, proposals, estimates, and delivery plans, while developing reusable cyber strategy assets including security controls, governance frameworks, maturity models, risk taxonomies, and playbooks, and coaching practitioners on advisory quality.
Requirements
- Bachelor's degree or equivalent demonstrated experience in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management
- 8+ years of cybersecurity, risk management, or technology consulting experience, including experience advising on artificial intelligence, machine learning, or emerging technology risk
- Experience designing AI governance frameworks, risk operating models, or security strategy programs for enterprise clients
- Experience with AI and machine learning architectures, risks of generative artificial intelligence and agentic systems, and one or more of the following: National Institute of Standards and Technology Artificial Intelligence Risk Management Framework, International Organization for Standardization/International Electrotechnical Commission 42001, Open Worldwide Application Security Project Large Language Model Top 10, MITRE ATLAS, or the European Union Artificial Intelligence Act
- Experience leading client-facing advisory or risk engagements and coordinating cross-functional workstreams across identity, data, infrastructure, security operations, and application security
- Ability to travel 25%-50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship