AI Security Senior Manager
or drop it. Probably include as a short paragraph under About the role? Or separate? The instruction: do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it. So we can include a short
with that date. We need sections: About the role (intro paragraph). Responsibilities (list). Requirements (maybe qualifications?). Qualifications (maybe required qualifications). Skills (list of skills). Benefits (none? Not mentioned). Pay (wage range given). Schedule (travel percentage maybe? It says Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve. That's schedule? Could be considered schedule. We'll include Schedule section with that travel requirement. We must not include sections with filler like "commensurate with experience". We have actual content for Pay: wage range $163,400 to $322,100. So include Pay. Benefits: not mentioned; we should not include Benefits section. Now we need to preserve all substantive information. Let's extract. Intro: "Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. As a Senior Manager, Strategy, Growth & Transformation specializing in Strategy in Deloitte Cyber's Cyber for AI practice, you will help clients solve complex AI cybersecurity, governance and risk strategy challenges as they scale generative AI and agentic systems across their client enterprises. This role sits at the intersection of executive client leadership and cross-capability strategic and solution delivery, combining deep AI cyber risk and governance expertise with the acumen to guide technical teams across Data, Infrastructure, Identity, Security Operations and Application Security. You will lead teams, shape strategic solutions during pursuits, develop reusable accelerators and drive high-quality outcomes for clients and teams alike." Then "Recruiting for this role ends on 05/31/2027." We'll put as a short p. Then "Work you'll do As a Senior Manager on the Cyber Strategy & Transformation team, you will be responsible for:" then bullet list. Let's extract responsibilities list: - Advise security, risk, data, technology, and business leaders on enterprise AI security strategy, governance, and risk appetite. - Lead complex, multi-workstream AI security strategy projects and technology implementations from current-state assessment and target operating model design through governance implementation and adoption. - Define scalable cybersecurity and governance patterns, including AI risk taxonomies, control frameworks, policy structures, intake and approval processes, and board or executive reporting models. - Provide strategic oversight across Data, Infrastructure, Identity, Application Security, and Security Operations workstreams, ensuring technical delivery aligns with client risk appetite and strategic objectives. - Lead pursuits and account growth by shaping differentiated strategic solutions, executive workshops, scope, estimates, pricing inputs, and delivery approaches. - Oversee client relationships, engagement quality, delivery risk, and customer satisfaction across a portfolio of AI security strategy work. - Build practice capability through offerings, alliances, thought leadership, reusable accelerators, and development of future leaders. Now "A successful candidate would possess these skills:" list: - Ability to work independently and collaborate as part of a team - Effective written and verbal communication skills - Meticulous attention to detail and quality of work product - Ability to build and sustain professional relationships - Ability to lead projects or workstreams - Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment - Strong interpersonal skills and professional demeanor - Ability to meet deadlines - Ability to mentor and provide clear guidance to others Now "The team Our Cyber Strategy & Transformation offering develops and transforms cyber programs in line with a client's strategic objectives, regulatory requirements, and risk appetite. It keeps the enterprise a step ahead of the evolving threat landscape and gives stakeholders confidence in the organization's cyber posture. Includes design of the cyber organization, governance, and risk assessments." That could be part of About the role or maybe separate section? Could be considered About the team. But we only have defined headings; we could incorporate into About the role or maybe a separate "About the team" not allowed. We'll incorporate into About the role paragraph. Now "Qualifications Required:" list: - Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, Risk Management - 12+ years of combined cybersecurity, risk management, or technology consulting experience - 12+ years of experience advising on Artificial Intelligence/Machine Learning (AI/ML) or emerging technology risk at the executive level - Experience leading enterprise AI governance, risk, or security strategy programs, including cross-functional delivery spanning identity, data, infrastructure, and application security domains - Experience with AI/ML architectures and generative AI or agentic system risk in roles involving review of technical design and engagement with engineering leaders - Experience with AI risk and security frameworks and regulations, including the National Institute of Standards and Technology Artificial Intelligence Risk Management Framework (NIST AI RMF), International Organization for Standardization/International Electrotechnical Commission 42001 (ISO/IEC 42001), Open Worldwide Application Security Project Large Language Model Top 10 (OWASP LLM Top 10), MITRE ATLAS, the European Union Artificial Intelligence Act (EU AI Act), and sector-specific regulatory guidance - Experience overseeing multi-workstream programs that include strategic recommendations, technical implementation, and enterprise-scale delivery risk management - Experience leading client engagements, technical and strategic pursuits, executive relationships, delivery quality, and account growth - Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve. - Limited immigration sponsorship may be allowed. Now "Preferred:" list: - Experience designing enterprise AI cybersecurity controls, governance operating models, or AI risk reporting for executive or board stakeholders - Experience with AI threat modeling, red teaming, or AI security evaluation programs - Experience developing offerings, alliance relationships, or market-facing points of view in AI security strategy - Experience with AI or ML development and operational lifecycles - Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Data Privacy Solutions Engineer (CDPSE), Artificial Intelligence Governance Professional (AIGP), or International Organization for Standardization/International Electrotechnical Commission 42001 Lead Implementer or Lead Auditor - Experience working in a regulated industry or with regulators, boards, or audit committees on AI risk topics Now Pay: "The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $163,400 to $322,100." We need to include Pay section with that range. Probably just the range; we can include a short sentence. Schedule: travel 25-50% is in Qualifications Required; but we could also put under Schedule. Since it's about travel, we can put Schedule section with that. Now we need to avoid duplication. We'll not repeat travel ability elsewhere if we put in Schedule; but we might still keep it in Qualifications? The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. So we need to keep the travel ability somewhere. If we put it under Schedule, we still need to keep it somewhere else? It's already in Qualifications Required list; we could keep it there and also have Schedule? That would duplicate. Better to move it to Schedule and remove from Qualifications? But then we would lose it from Qualifications. However we could keep it in Qualifications and also have Schedule referencing it? That would duplicate. The instruction says preserve ALL substantive information; duplication is not prohibited but we should avoid duplicated lines (they said remove duplicated lines). So we should not duplicate. So we need to decide where to place travel ability. Since Schedule section is for schedule info, we can put travel ability there, and we can omit it from Qualifications Required list. But then we lose that qualification from the list; but we could keep it in Qualifications but note that it's also schedule? Might be considered duplication. Safer to keep it in Qualifications and not have a Schedule section unless there is other schedule info (like work hours). Since only schedule info is travel, we could still include Schedule section with that info, and we could keep it also in Qualifications? That duplicates. The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." So we should avoid duplicated lines. So we should not repeat the same sentence. So we need to decide: either keep travel ability in Qualifications and not have Schedule, or keep it in Schedule and remove from Qualifications. Which is more appropriate? The heading list includes Schedule as a possible section; we should include Schedule only if posting has real, specific content for it. The posting does have travel percentage. So we should include Schedule. Then we need to ensure we don't duplicate that content elsewhere. So we should remove the travel ability line from Qualifications Required list. Thus Qualifications Required list will exclude the travel line. Now we need to ensure we keep all other qualifications. Now we need to format. We'll produce:
About the role
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. As a Senior Manager, Strategy, Growth & Transformation specializing in Strategy in Deloitte Cyber's Cyber for AI practice, you will help clients solve complex AI cybersecurity, governance and risk strategy challenges as they scale generative AI and agentic systems across their client enterprises. This role sits at the intersection of executive client leadership and cross-capability strategic and solution delivery, combining deep AI cyber risk and governance expertise with the acumen to guide technical teams across Data, Infrastructure, Identity, Security Operations and Application Security. You will lead teams, shape strategic solutions during pursuits, develop reusable accelerators and drive high-quality outcomes for clients and teams alike.
Recruiting for this role ends on 05/31/2027.
Responsibilities
- Advise security, risk, data, technology, and business leaders on enterprise AI security strategy, governance, and risk appetite.
- Lead complex, multi-workstream AI security strategy projects and technology implementations from current-state assessment and target operating model design through governance implementation and adoption.
- Define scalable cybersecurity and governance patterns, including AI risk taxonomies, control frameworks, policy structures, intake and approval processes, and board or executive reporting models.
- Provide strategic oversight across Data, Infrastructure, Identity, Application Security, and Security Operations workstreams, ensuring technical delivery aligns with