Cyber Data Protection Specialist - Senior Consultant
for headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must preserve all substantive info, no boilerplate. Remove cookie/navigation/legal/EEO etc. Also remove application instructions. The posting includes: introductory paragraph about role, then "Work You'll Do" list of duties, then "The Team" description, then "Qualifications Required:" list, then "Preferred:" list, then wage range and incentive program.
We need to map to sections: About the role (intro), Responsibilities (Work You'll Do), Requirements (maybe Qualifications Required?), Qualifications (maybe Preferred?), Skills (maybe technical skills?), Benefits (maybe not present), Pay (wage range), Schedule (travel percentage). Also maybe "Benefits" not present, so omit. "Schedule" we have travel 25-50% - that's schedule/travel. Could include under Schedule.
We must not create sections with filler like "commensurate with experience". Pay section we have wage range: $105,400 to $207,800 plus discretionary annual incentive. That's specific, so include Pay.
We must not include Job ID etc.
We need to use - for any list of duties/requirements/benefits. Use
for prose.
We need to preserve all substantive info. So we need to include the introductory paragraphs, the team description, the qualifications required list, preferred list, maybe skills list (tools). Also mention certifications, degree, travel.
We need to decide which headings to use.
Potential sections:
- About the role: intro paragraph(s) about passion, Deloitte team, what they do.
- Responsibilities: the "Work You'll Do" bullet list.
- Requirements: maybe the "Qualifications Required:" list (the required qualifications). Could also include degree, travel, certifications.
- Qualifications: maybe the "Preferred:" list.
- Skills: maybe the technical tools list (Microsoft Purview, etc.) but that's already in qualifications required. Could combine.
But we must not create thin sections. Better to have About the role, Responsibilities, Requirements (including required qualifications, degree, travel, certifications), Preferred Qualifications, Pay, Schedule (travel). Benefits omitted.
We need to ensure we don't duplicate content.
Let's extract content.
Intro:
"Are you passionate about helping leading organizations reduce cyber risk, protect critical data, and build resilience in an increasingly complex digital world? If so, consider joining Deloitte & Touche LLP's growing Cyber Risk Digital Trust & Privacy practice. Our teams work with clients to deliver business-driven data protection and privacy solutions that not only address regulatory requirements, but also enable secure growth, strengthen trust, and improve operational effectiveness. You'll help organizations harness emerging and innovative technologies to better understand their data, protect what matters most, and stay ahead of evolving threats."
That's About the role.
Work You'll Do bullet list:
- Serve as a subject matter expert and trusted advisor to clients, helping them assess strategic and practical data protection needs in response to emerging risks
- Assist clients in designing, implementing and operating technology and process solutions to reduce data risks
- Assist clients with developing requirements, evaluating vendor solutions, architecting, implementing and operating data protection solutions
- Lead client engagements and drive results by:
- Driving day-to-day execution, communicating updates to clients and firm leadership
- Providing leadership and support to delivery teams to ensure completion and accuracy of high-quality work products
- Tracking and reporting on project timelines to ensure on time and on budget delivery
- Perform the role of mentor and coach to assist junior staff to develop skills by providing feedback, sharing experiences and creating opportunities for professional growth
- Manage and lead the proposal development process
- Contribute to Deloitte's thought leadership in client organizations and external marketplace
- Help foster an inclusive, collaborative, and high-performing team environment
- Stay current on industry trends in cyber risk, data protection, and emerging technologies
We need to preserve sub-bullets? The instruction: use
- for any list of duties/requirements/benefits. For nested lists, we could still use
- inside
- . That's fine.
The Team paragraph:
"The Team Deloitte Cyber's Digital Trust & Privacy practice helps organizations build and sustain confidence in their digital products, platforms, services, data practices, and customer experiences. Our work brings together digital trust, online protection, privacy, AI governance, identity, data protection, cybersecurity, and regulatory compliance capabilities."
That could be part of About the role or separate section? Could be included in About the role as extra prose. But we already have About the role intro; we could add this as another paragraph under About the role. That's fine.
Qualifications Required list:
- 4+ years of professional experience in data protection and information security, which may include Data Discovery, Data Classification and Rights Management (DCRM, DRM, IRM), Data Access Governance (DAG), Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), Cloud Security and SaaS Security (e.g., AWS security, Azure/M365 security, Databricks, Snowflake)
- 2+ years of professional experience developing data protection strategies, roadmaps and frameworks, including designing, implementing and operating data protections services
- 2+ years of total hands-on technical experience and/or architecture-level experience with two or more data protection technologies
- Hands-on technical experience and/or architecture-level experience with tools such as Microsoft Purview, Cyera, Securiti.ai, Varonis, including several of the following: DLP, sensitivity labels, data classification, DSPM, DSPM for AI, on-demand classification, or related Microsoft 365 data security capabilities
- Knowledge of AI security and governance concepts, including data protection considerations for generative AI, copilots, agents, or other AI-enabled business use cases
- Experience defining data protection use cases, documenting business requirements and evaluating technology solutions
- Experience working with multifunctional teams of IT professionals, legal/compliance teams, and business executives
- Experience with senior leadership communications in a consulting or client-facing environment
- Familiarity with change management, deployment and operational processes in large IT organizations
- Professional certifications such as CISSP, CISM, CCSP, SC-100, SC-400, AWS Security Specialty or similar.
- Bachelor's degree in Cybersecurity, Information Security, Engineering, Computer Science, Information Technology or related field
- Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve
- Limited sponsorship may be available
Preferred list:
- Experience with public cloud (Azure, AWS, GCP) security and modern data platforms (e.g., Snowflake, Data bricks)
- Familiarity with sophisticated multinational companies and distributed business models
- Experience in regulated industries and familiarity with requirements such as HIPAA, PCI DSS, SOX, or global privacy obligations.
- Demonstrated success contributing to proposals, practice growth, market eminence, or people development.
Pay section:
"The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance."
We need to keep that as Pay section.
Schedule: travel 25-50% already in qualifications required; but we could also put under Schedule. However we already have travel in qualifications required; maybe we should not duplicate. The instruction: preserve ALL substantive information; do not invent or summarize away detail. If we put travel under Schedule, we still need to keep it somewhere else? Could move it to Schedule and remove from qualifications required? But that would be removing content from qualifications required (travel). Better to keep travel in qualifications required and also maybe not create Schedule section if it's already covered. However the instruction says: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. It does not forbid having content appear in multiple sections? Probably better to avoid duplication. So we could keep travel in qualifications required and not create a Schedule section. But the instruction also says: Prefer a few substantive sections over many thin ones. So we could have About the role, Responsibilities, Requirements (including qualifications required, degree, certifications, travel, sponsorship), Preferred Qualifications, Pay. That's 5 sections.
We need to decide headings: About the role, Responsibilities, Requirements, Preferred Qualifications, Pay.
But we also have "Qualifications" heading possible. Could combine Required and Preferred under Requirements and Preferred Qualifications. Or we could have Requirements (required) and Qualifications (preferred). The instruction says use headings like Qualifications, Skills, Benefits, Pay, Schedule. So we could have:
- About the role (intro + team)
- Responsibilities (Work You'll Do)
- Qualifications (Required)
- Skills (maybe technical tools list) but that's already in qualifications. Could split: Qualifications (education, certifications, travel, sponsorship) and Skills (technical experience). But that may be thin.
Better to follow the instruction: Use headings for sections that exist. We have content for About the role, Responsibilities, Qualifications (required), Preferred (maybe as Qualifications also?), Pay. Could also have Skills (technical tools). But we risk thin sections.
Let's think: The posting includes a lot of technical tool experience under qualifications required. That could be considered Skills. So we could have:
- About the role (intro + team)
- Responsibilities (Work You'll Do)
- Qualifications (education, certifications, travel, sponsorship)
- Skills (technical experience, tools, AI knowledge, etc.)
- Preferred Qualifications (preferred list)
- Pay
That's 6 sections, each substantive.
We must ensure we don't create sections with filler like "commensurate with experience". All have specific content.
Let's extract each.
About the role: combine intro paragraph and The Team paragraph.
Intro: "Are you passionate about helping leading organizations reduce cyber risk, protect critical data, and build resilience in an increasingly complex digital world? If so, consider joining Deloitte & Touche LLP's growing Cyber Risk Digital Trust & Privacy practice. Our teams work with clients to deliver business-driven data protection and privacy solutions that not only address regulatory requirements, but also enable secure growth, strengthen trust, and improve operational effectiveness. You'll help organizations harness emerging and innovative technologies to better understand their data, protect what matters most, and stay ahead of evolving threats."
Team: "The Team Deloitte Cyber's Digital Trust & Privacy practice helps organizations build and sustain confidence in their digital products, platforms, services, data practices, and customer experiences. Our work brings together digital trust, online protection, privacy, AI governance, identity, data protection, cybersecurity, and regulatory compliance capabilities."
We can combine into one
or two
s. Use
for prose.
Responsibilities: list of duties.
We need to preserve sub-bullets under "Lead client engagements and drive results by:" which has three sub-items. We'll represent as nested
.
Qualifications (required): list items that are required: 4+ years experience, 2+ years developing strategies, 2+ years hands-on technical experience, hands-on experience with tools, knowledge
for prose. We need to preserve all substantive info. So we need to include the introductory paragraphs, the team description, the qualifications required list, preferred list, maybe skills list (tools). Also mention certifications, degree, travel. We need to decide which headings to use. Potential sections: - About the role: intro paragraph(s) about passion, Deloitte team, what they do. - Responsibilities: the "Work You'll Do" bullet list. - Requirements: maybe the "Qualifications Required:" list (the required qualifications). Could also include degree, travel, certifications. - Qualifications: maybe the "Preferred:" list. - Skills: maybe the technical tools list (Microsoft Purview, etc.) but that's already in qualifications required. Could combine. But we must not create thin sections. Better to have About the role, Responsibilities, Requirements (including required qualifications, degree, travel, certifications), Preferred Qualifications, Pay, Schedule (travel). Benefits omitted. We need to ensure we don't duplicate content. Let's extract content. Intro: "Are you passionate about helping leading organizations reduce cyber risk, protect critical data, and build resilience in an increasingly complex digital world? If so, consider joining Deloitte & Touche LLP's growing Cyber Risk Digital Trust & Privacy practice. Our teams work with clients to deliver business-driven data protection and privacy solutions that not only address regulatory requirements, but also enable secure growth, strengthen trust, and improve operational effectiveness. You'll help organizations harness emerging and innovative technologies to better understand their data, protect what matters most, and stay ahead of evolving threats." That's About the role. Work You'll Do bullet list: - Serve as a subject matter expert and trusted advisor to clients, helping them assess strategic and practical data protection needs in response to emerging risks - Assist clients in designing, implementing and operating technology and process solutions to reduce data risks - Assist clients with developing requirements, evaluating vendor solutions, architecting, implementing and operating data protection solutions - Lead client engagements and drive results by: - Driving day-to-day execution, communicating updates to clients and firm leadership - Providing leadership and support to delivery teams to ensure completion and accuracy of high-quality work products - Tracking and reporting on project timelines to ensure on time and on budget delivery - Perform the role of mentor and coach to assist junior staff to develop skills by providing feedback, sharing experiences and creating opportunities for professional growth - Manage and lead the proposal development process - Contribute to Deloitte's thought leadership in client organizations and external marketplace - Help foster an inclusive, collaborative, and high-performing team environment - Stay current on industry trends in cyber risk, data protection, and emerging technologies We need to preserve sub-bullets? The instruction: use
- for any list of duties/requirements/benefits. For nested lists, we could still use
- inside
- . That's fine.
The Team paragraph:
"The Team Deloitte Cyber's Digital Trust & Privacy practice helps organizations build and sustain confidence in their digital products, platforms, services, data practices, and customer experiences. Our work brings together digital trust, online protection, privacy, AI governance, identity, data protection, cybersecurity, and regulatory compliance capabilities."
That could be part of About the role or separate section? Could be included in About the role as extra prose. But we already have About the role intro; we could add this as another paragraph under About the role. That's fine.
Qualifications Required list:
- 4+ years of professional experience in data protection and information security, which may include Data Discovery, Data Classification and Rights Management (DCRM, DRM, IRM), Data Access Governance (DAG), Data Loss Prevention (DLP), Cloud Access Security Broker (CASB), Data Security Posture Management (DSPM), Cloud Security and SaaS Security (e.g., AWS security, Azure/M365 security, Databricks, Snowflake)
- 2+ years of professional experience developing data protection strategies, roadmaps and frameworks, including designing, implementing and operating data protections services
- 2+ years of total hands-on technical experience and/or architecture-level experience with two or more data protection technologies
- Hands-on technical experience and/or architecture-level experience with tools such as Microsoft Purview, Cyera, Securiti.ai, Varonis, including several of the following: DLP, sensitivity labels, data classification, DSPM, DSPM for AI, on-demand classification, or related Microsoft 365 data security capabilities
- Knowledge of AI security and governance concepts, including data protection considerations for generative AI, copilots, agents, or other AI-enabled business use cases
- Experience defining data protection use cases, documenting business requirements and evaluating technology solutions
- Experience working with multifunctional teams of IT professionals, legal/compliance teams, and business executives
- Experience with senior leadership communications in a consulting or client-facing environment
- Familiarity with change management, deployment and operational processes in large IT organizations
- Professional certifications such as CISSP, CISM, CCSP, SC-100, SC-400, AWS Security Specialty or similar.
- Bachelor's degree in Cybersecurity, Information Security, Engineering, Computer Science, Information Technology or related field
- Ability to travel 25-50%, on average, based on the work you do and the clients and industries/sectors you serve
- Limited sponsorship may be available
Preferred list:
- Experience with public cloud (Azure, AWS, GCP) security and modern data platforms (e.g., Snowflake, Data bricks)
- Familiarity with sophisticated multinational companies and distributed business models
- Experience in regulated industries and familiarity with requirements such as HIPAA, PCI DSS, SOX, or global privacy obligations.
- Demonstrated success contributing to proposals, practice growth, market eminence, or people development.
Pay section:
"The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800. You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance."
We need to keep that as Pay section.
Schedule: travel 25-50% already in qualifications required; but we could also put under Schedule. However we already have travel in qualifications required; maybe we should not duplicate. The instruction: preserve ALL substantive information; do not invent or summarize away detail. If we put travel under Schedule, we still need to keep it somewhere else? Could move it to Schedule and remove from qualifications required? But that would be removing content from qualifications required (travel). Better to keep travel in qualifications required and also maybe not create Schedule section if it's already covered. However the instruction says: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text. It does not forbid having content appear in multiple sections? Probably better to avoid duplication. So we could keep travel in qualifications required and not create a Schedule section. But the instruction also says: Prefer a few substantive sections over many thin ones. So we could have About the role, Responsibilities, Requirements (including qualifications required, degree, certifications, travel, sponsorship), Preferred Qualifications, Pay. That's 5 sections.
We need to decide headings: About the role, Responsibilities, Requirements, Preferred Qualifications, Pay.
But we also have "Qualifications" heading possible. Could combine Required and Preferred under Requirements and Preferred Qualifications. Or we could have Requirements (required) and Qualifications (preferred). The instruction says use headings like Qualifications, Skills, Benefits, Pay, Schedule. So we could have:
- About the role (intro + team)
- Responsibilities (Work You'll Do)
- Qualifications (Required)
- Skills (maybe technical tools list) but that's already in qualifications. Could split: Qualifications (education, certifications, travel, sponsorship) and Skills (technical experience). But that may be thin.
Better to follow the instruction: Use headings for sections that exist. We have content for About the role, Responsibilities, Qualifications (required), Preferred (maybe as Qualifications also?), Pay. Could also have Skills (technical tools). But we risk thin sections.
Let's think: The posting includes a lot of technical tool experience under qualifications required. That could be considered Skills. So we could have:
- About the role (intro + team)
- Responsibilities (Work You'll Do)
- Qualifications (education, certifications, travel, sponsorship)
- Skills (technical experience, tools, AI knowledge, etc.)
- Preferred Qualifications (preferred list)
- Pay
That's 6 sections, each substantive.
We must ensure we don't create sections with filler like "commensurate with experience". All have specific content.
Let's extract each.
About the role: combine intro paragraph and The Team paragraph.
Intro: "Are you passionate about helping leading organizations reduce cyber risk, protect critical data, and build resilience in an increasingly complex digital world? If so, consider joining Deloitte & Touche LLP's growing Cyber Risk Digital Trust & Privacy practice. Our teams work with clients to deliver business-driven data protection and privacy solutions that not only address regulatory requirements, but also enable secure growth, strengthen trust, and improve operational effectiveness. You'll help organizations harness emerging and innovative technologies to better understand their data, protect what matters most, and stay ahead of evolving threats."
Team: "The Team Deloitte Cyber's Digital Trust & Privacy practice helps organizations build and sustain confidence in their digital products, platforms, services, data practices, and customer experiences. Our work brings together digital trust, online protection, privacy, AI governance, identity, data protection, cybersecurity, and regulatory compliance capabilities."
We can combine into one
or two
s. Use
for prose. Responsibilities: list of duties. We need to preserve sub-bullets under "Lead client engagements and drive results by:" which has three sub-items. We'll represent as nested
- .
Qualifications (required): list items that are required: 4+ years experience, 2+ years developing strategies, 2+ years hands-on technical experience, hands-on experience with tools, knowledge