AI Security Senior Consultant
for section headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections when posting has real specific content. We have content: description of role, responsibilities list, skills list, qualifications required and preferred, pay range, maybe benefits? There's mention of discretionary annual incentive program (benefit). Also mention of travel requirement (25-50%). That could be under Requirements or Qualifications? Travel is a requirement. Also limited immigration sponsorship may be available (maybe under Benefits? but it's a note). We'll include sections: About the role (intro paragraph), Responsibilities (list), Requirements (maybe combine qualifications and skills?), but we have separate sections: Skills, Qualifications, Benefits, Pay. We need to avoid filler. Use - for any list of duties/requirements/benefits. Use
for prose.
We must not repeat job title as heading. No Job ID. Remove boilerplate.
We need to preserve all substantive info.
Let's parse:
Intro: "Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. As a Senior Consultant, Strategy, Growth & Transformation in Deloitte Cyber's Cyber for AI practice, you will own and deliver work that helps clients understand and mitigate/monitor the risks of adopting AI across the enterprise and define the cybersecurity controls, governance, policy and risk management approaches needed to deploy AI securely and safely. You will combine client advisory with structured cyber risk and governance work, turning business and regulatory requirements into frameworks, roadmaps and recommendations, and you will work closely with the practice's Data, Infrastructure, Identity, Security Operations and Application Security teams to make sure strategy translates into implementable requirements. You will guide junior practitioners, lead project activities and client interactions and help identify, win and deliver new work. Recruiting for this role ends on 05/31/2027."
That's about the role. Could be About the role section.
Then "Work you'll do As a Senior Consultant, Strategy, Growth & Transformation on the Cyber Strategy & Transformation team, you will be responsible for:" then list of responsibilities (bulleted). We'll put under Responsibilities.
Then "A successful candidate would possess these skills:" list of skills. We'll put under Skills.
Then "The team Our Cyber Strategy & Transformation offering develops and transforms cyber programs..." That's more about team; could be part of About the role or separate but we can incorporate into About the role.
Then "Qualifications Required:" list. Then "Preferred:" list. We'll combine under Qualifications (maybe separate Required and Preferred as sublists? But we can just list all qualifications under Qualifications, maybe separate with headings? The instruction: use
for section headings; we can have Qualifications section and inside we can have
or
. We could separate Required and Preferred as paragraphs but better to keep as one list with notes? Might be okay to separate with indicating Required and Preferred. But we must not invent headings inside Qualifications beyond
. We can have
Required:
then . That's okay.
Then travel and limited immigration sponsorship: could be under Requirements or Qualifications as notes.
Then Pay: wage range $105,400 to $207,800 plus discretionary annual incentive program. That's Pay section.
Benefits: mention of discretionary annual incentive program (maybe benefit). Also maybe other benefits not listed. We'll include Benefits section with that incentive program.
Schedule: travel 25-50% could be considered schedule? Might be under Requirements. But we could add Schedule section with travel expectation. However instruction: only include Schedule if posting actually states them. It does state travel 25-50% average. So we can include Schedule section.
We must not include placeholder like "commensurate with experience". Not present.
Now produce HTML fragment.
Structure:
About the role
... (intro paragraph plus team description maybe)
Responsibilities
- Lead discovery and current-state assessments of client AI cybersecurity controls governance, risk management and security practices across business units and AI use cases.
- Facilitate stakeholder workshops with security, risk, data science, legal and business leaders to surface AI risk concerns and gather requirements.
- Develop AI risk registers, control frameworks and maturity assessments aligned to standards such as the NIST AI RMF, ISO/IEC 42001, the OWASP LLM Top 10 and MITRE ATLAS.
- Translate strategic recommendations into workstream-level roadmaps, coordinating with Data, Infrastructure, Identity and Application Security practitioners on technical implementation details.
- Draft governance artifacts, including AI use-case intake processes, policy templates, model risk tiering approaches and AI security awareness materials.
- Own a workstream within a broader engagement, manage dependencies and milestones, provide day-to-day guidance to consultants, and support client demonstrations, executive readouts, and research, benchmarking, and estimation inputs to pursuits.
Skills
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
Qualifications
Required:
- Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management
- 4+ years of experience in cybersecurity, risk, or technology consulting, including experience with artificial intelligence or machine learning systems, data governance, or emerging technology risk.
- Experience working with artificial intelligence and machine learning concepts, including model development, training, fine-tuning, retrieval-augmented generation, and agentic architectures.
- Experience applying artificial intelligence risk and security frameworks or regulations, including the National Institute of Standards and Technology Artificial Intelligence Risk Management Framework (NIST AI RMF), International Organization for Standardization/International Electrotechnical Commission 42001 (ISO/IEC 42001), Open Worldwide Application Security Project Large Language Model Top 10 (OWASP LLM Top 10), MITRE Adversarial Threat Landscape for Artificial-Intelligence Systems (MITRE ATLAS), or the European Union Artificial Intelligence Act.
- Experience conducting risk assessments, gap analyses, or maturity assessments in cybersecurity, privacy, or governance and developing strategy documents, governance frameworks, and executive presentation materials.
- Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- Experience in consulting, client delivery, or client-facing advisory roles and experience building or customizing prompts, templates, or lightweight artificial intelligence workflows to standardize recurring deliverables, including risk registers, maturity assessments, or policy drafts.
- Experience with artificial intelligence governance platforms, governance, risk, and compliance tools, or model risk management systems.
- Experience with the machine learning lifecycle and technologies such as PyTorch, TensorFlow, or MLflow.
- Experience developing reusable strategy assets, reviewing work products of junior consultants, or contributing to methodologies and frameworks.
- Experience in regulated industries such as financial services, healthcare, life sciences, or the public sector.
- Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Data Privacy Solutions Engineer (CDPSE), Artificial Intelligence Governance Professional (AIGP), or ISO/IEC 42001 Foundation or Lead Implementer.
Benefits
- Eligibility to participate in a discretionary annual incentive program, subject to program rules, with award based on individual and organizational performance.
Pay
A reasonable estimate of the current range is $105,400 to $207,800.
Schedule
Travel expectation: 25-50% on average, based on work and client/industry.
Check we didn't duplicate travel (already in Qualifications Required). Might be redundant but okay. Could remove from Qualifications and keep only in Schedule. But we need to preserve all substantive info; we can keep travel in Schedule and note in Qualifications maybe not needed. However Qualifications Required includes travel ability; we could keep it there and also have Schedule. Might be duplication but still preserving info. Might be considered redundant but not violating instruction. However better to avoid duplication? Not prohibited. We'll keep travel in Qualifications Required and also Schedule maybe redundant but okay.
But we might want to avoid duplication; we could move travel to Schedule and remove from Qualifications. However Qualifications Required list includes many items; removing travel might lose that piece. But we can keep it in both; it's still preserving.
Now ensure no boilerplate like "Recruiting for this role ends on 05/31/2027." That's substantive? It's a date; we should keep it. Where to place? Could be in About the role paragraph. We'll include that sentence.
Also "The wage range for this role takes into account..." we already captured range; we could keep that sentence but it's somewhat boilerplate but still substantive. Might be okay to keep in Pay section as a note. But we already have range; we could add a sentence about range estimate not adjusted for geographic differential etc. Might be considered filler but it's still info. The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we should keep that explanatory sentence. However it's somewhat generic but still part of posting. We'll include in Pay section as a after the range.
Also mention of discretionary annual incentive program details: we already have in Benefits.
Also mention of "At Deloitte, it is not typical for an individual to be hired at or near the top of the range..." That's also substantive; we could include in Pay section.
Let's incorporate.
Pay section:
Pay
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
But we already have Benefits section for incentive program; we could keep it only there. However the Pay section
for prose. We must not repeat job title as heading. No Job ID. Remove boilerplate. We need to preserve all substantive info. Let's parse: Intro: "Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. As a Senior Consultant, Strategy, Growth & Transformation in Deloitte Cyber's Cyber for AI practice, you will own and deliver work that helps clients understand and mitigate/monitor the risks of adopting AI across the enterprise and define the cybersecurity controls, governance, policy and risk management approaches needed to deploy AI securely and safely. You will combine client advisory with structured cyber risk and governance work, turning business and regulatory requirements into frameworks, roadmaps and recommendations, and you will work closely with the practice's Data, Infrastructure, Identity, Security Operations and Application Security teams to make sure strategy translates into implementable requirements. You will guide junior practitioners, lead project activities and client interactions and help identify, win and deliver new work. Recruiting for this role ends on 05/31/2027." That's about the role. Could be About the role section. Then "Work you'll do As a Senior Consultant, Strategy, Growth & Transformation on the Cyber Strategy & Transformation team, you will be responsible for:" then list of responsibilities (bulleted). We'll put under Responsibilities. Then "A successful candidate would possess these skills:" list of skills. We'll put under Skills. Then "The team Our Cyber Strategy & Transformation offering develops and transforms cyber programs..." That's more about team; could be part of About the role or separate but we can incorporate into About the role. Then "Qualifications Required:" list. Then "Preferred:" list. We'll combine under Qualifications (maybe separate Required and Preferred as sublists? But we can just list all qualifications under Qualifications, maybe separate with headings? The instruction: use
for section headings; we can have Qualifications section and inside we can have
or
- . We could separate Required and Preferred as paragraphs but better to keep as one list with notes? Might be okay to separate with
- Lead discovery and current-state assessments of client AI cybersecurity controls governance, risk management and security practices across business units and AI use cases.
- Facilitate stakeholder workshops with security, risk, data science, legal and business leaders to surface AI risk concerns and gather requirements.
- Develop AI risk registers, control frameworks and maturity assessments aligned to standards such as the NIST AI RMF, ISO/IEC 42001, the OWASP LLM Top 10 and MITRE ATLAS.
- Translate strategic recommendations into workstream-level roadmaps, coordinating with Data, Infrastructure, Identity and Application Security practitioners on technical implementation details.
- Draft governance artifacts, including AI use-case intake processes, policy templates, model risk tiering approaches and AI security awareness materials.
- Own a workstream within a broader engagement, manage dependencies and milestones, provide day-to-day guidance to consultants, and support client demonstrations, executive readouts, and research, benchmarking, and estimation inputs to pursuits.
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
- Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or Risk Management
- 4+ years of experience in cybersecurity, risk, or technology consulting, including experience with artificial intelligence or machine learning systems, data governance, or emerging technology risk.
- Experience working with artificial intelligence and machine learning concepts, including model development, training, fine-tuning, retrieval-augmented generation, and agentic architectures.
- Experience applying artificial intelligence risk and security frameworks or regulations, including the National Institute of Standards and Technology Artificial Intelligence Risk Management Framework (NIST AI RMF), International Organization for Standardization/International Electrotechnical Commission 42001 (ISO/IEC 42001), Open Worldwide Application Security Project Large Language Model Top 10 (OWASP LLM Top 10), MITRE Adversarial Threat Landscape for Artificial-Intelligence Systems (MITRE ATLAS), or the European Union Artificial Intelligence Act.
- Experience conducting risk assessments, gap analyses, or maturity assessments in cybersecurity, privacy, or governance and developing strategy documents, governance frameworks, and executive presentation materials.
- Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
- Experience in consulting, client delivery, or client-facing advisory roles and experience building or customizing prompts, templates, or lightweight artificial intelligence workflows to standardize recurring deliverables, including risk registers, maturity assessments, or policy drafts.
- Experience with artificial intelligence governance platforms, governance, risk, and compliance tools, or model risk management systems.
- Experience with the machine learning lifecycle and technologies such as PyTorch, TensorFlow, or MLflow.
- Experience developing reusable strategy assets, reviewing work products of junior consultants, or contributing to methodologies and frameworks.
- Experience in regulated industries such as financial services, healthcare, life sciences, or the public sector.
- Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Data Privacy Solutions Engineer (CDPSE), Artificial Intelligence Governance Professional (AIGP), or ISO/IEC 42001 Foundation or Lead Implementer.
- Eligibility to participate in a discretionary annual incentive program, subject to program rules, with award based on individual and organizational performance.
indicating Required and Preferred. But we must not invent headings inside Qualifications beyond
. We can have
Required:
then- . That's okay.
Then travel and limited immigration sponsorship: could be under Requirements or Qualifications as notes.
Then Pay: wage range $105,400 to $207,800 plus discretionary annual incentive program. That's Pay section.
Benefits: mention of discretionary annual incentive program (maybe benefit). Also maybe other benefits not listed. We'll include Benefits section with that incentive program.
Schedule: travel 25-50% could be considered schedule? Might be under Requirements. But we could add Schedule section with travel expectation. However instruction: only include Schedule if posting actually states them. It does state travel 25-50% average. So we can include Schedule section.
We must not include placeholder like "commensurate with experience". Not present.
Now produce HTML fragment.
Structure:
About the role
... (intro paragraph plus team description maybe)
Responsibilities
Skills
Qualifications
Required:
Preferred:
Benefits
Pay
A reasonable estimate of the current range is $105,400 to $207,800.
Schedule
Travel expectation: 25-50% on average, based on work and client/industry.
Check we didn't duplicate travel (already in Qualifications Required). Might be redundant but okay. Could remove from Qualifications and keep only in Schedule. But we need to preserve all substantive info; we can keep travel in Schedule and note in Qualifications maybe not needed. However Qualifications Required includes travel ability; we could keep it there and also have Schedule. Might be duplication but still preserving info. Might be considered redundant but not violating instruction. However better to avoid duplication? Not prohibited. We'll keep travel in Qualifications Required and also Schedule maybe redundant but okay. But we might want to avoid duplication; we could move travel to Schedule and remove from Qualifications. However Qualifications Required list includes many items; removing travel might lose that piece. But we can keep it in both; it's still preserving. Now ensure no boilerplate like "Recruiting for this role ends on 05/31/2027." That's substantive? It's a date; we should keep it. Where to place? Could be in About the role paragraph. We'll include that sentence. Also "The wage range for this role takes into account..." we already captured range; we could keep that sentence but it's somewhat boilerplate but still substantive. Might be okay to keep in Pay section as a note. But we already have range; we could add a sentence about range estimate not adjusted for geographic differential etc. Might be considered filler but it's still info. The instruction: Preserve ALL substantive information; do NOT invent or summarize away detail. So we should keep that explanatory sentence. However it's somewhat generic but still part of posting. We'll include in Pay section as aafter the range. Also mention of discretionary annual incentive program details: we already have in Benefits. Also mention of "At Deloitte, it is not typical for an individual to be hired at or near the top of the range..." That's also substantive; we could include in Pay section. Let's incorporate. Pay section:
Pay
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
But we already have Benefits section for incentive program; we could keep it only there. However the Pay section