Security Solutions Principal – Governance, Risk, and Compliance

We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. No job title heading. No Job ID etc. Remove boilerplate. Must preserve all substantive info. We need to parse the posting. Content: - Intro about WWT (Why WWT?) – could be "About the role"? Actually "About the role" is generic; but we have description of company and team. Could be "About the role" or "About WWT". The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can use those headings if content matches. We have sections: "Why WWT?" (company overview). Could map to "About the role" or maybe "About the company". But they said use those example headings; we can use "About the role" for description of role and team. However we also have "Position Overview:" which is essentially role overview. Could be "About the role". Then "Essential Functions:" -> Responsibilities. Then "Qualifications:" -> Qualifications. Then there is a list of qualifications etc. Also there is "AI And Cybersecurity Risk Experience Requirements" which is more detail; could be part of Qualifications or Requirements. There's also "Framework and Regulatory experience..." etc. Also "Industry Experience". Also "Want to learn more about Consulting & Security Services?" (links) maybe not needed. Then salary range: Pay. Then benefits: Benefits. Then EEO etc (remove). Also remote note "#Remote" maybe schedule? Not given. We need to include Pay section only if posting states it. It does: "A reasonable estimate of the current base pay range for this position is $153,200 to $191,500 annually." Also mention variable incentive compensation. So we include Pay. Benefits: they list benefits. So include Benefits. Schedule: not mentioned. No schedule info. So omit. Skills: maybe we could extract from qualifications but they didn't have a separate Skills section; we could combine into Qualifications. But we could create Skills if we have explicit list; not really. So omit Skills. Requirements: Could be separate from Qualifications? The posting has "Qualifications:" then bullet list. Also there is "Framework and Regulatory experience..." and "Industry Experience". Those could be Requirements. But we can treat all as Qualifications. However instruction: prefer few substantive sections over many thin ones. So we could have sections: About the role, Responsibilities, Qualifications, Pay, Benefits. That's enough. We need to preserve all substantive information. Must not lose details like specific frameworks, industries, etc. So Qualifications section should include all those details. We need to format lists with

• . For prose use

  . We must not repeat job title as heading. Not include Job ID. We must remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. Also remove the "Want to learn more about Consulting & Security Services? Check us out on our platform: ..." maybe considered boilerplate? It's not essential but it's a link; could be considered extra but maybe keep? It's not substantive about role; likely can drop. Also remove "Certain states and localities require employers to post a reasonable estimate of salary range." That's part of Pay but we can keep the salary range sentence; the preceding sentence is boilerplate but we can keep as part of Pay? Might be okay to keep but it's not substantive; but we can keep the salary range line. The instruction: preserve ALL substantive information; do NOT invent or summarize away detail. The boilerplate sentence about certain states is not substantive about the job; but it's part of the posting. However they said remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. That sentence is not exactly those categories but could be considered legal boilerplate. Safer to remove it. Keep only the salary range sentence. Similarly benefits note: "Note: This is not an all-encompassing list..." is boilerplate; we can drop. Also "We strive to create an environment..." is EEO boilerplate; remove. Also "If you require accessibility accommodation..." remove. Also "World Wide Technology is an Equal Opportunity Employer." remove. Also "#Remote" maybe schedule? Not needed. Thus final HTML:

  About the role

  ... content from Why WWT? and What is the Solutions Consulting & Engineering (SC&E) Team and why join? and Position Overview: ...

  We need to combine those paragraphs. Let's extract: "Why WWT? World Wide Technology (WWT) strives to make a new world happen. WWT's work benefits clients and partners as much as it does its people and community across the globe. Founded in 1990, WWT brings together strategy, deep technical expertise and world-class partnerships to help public and private sector organizations design, build and scale intelligent AI, digital, cybersecurity, cloud and infrastructure solutions. Through its Advanced Technology Center (ATC)—a collaborative ecosystem featuring state-of-the-art hardware and software—WWT enables clients and partners to conceptualize, test and validate innovative technology and then deploy solutions at scale using its global integration and distributions capabilities. With more than 14,000 team members and over 60 locations globally, WWT's culture—grounded in core values and leadership philosophies—has been recognized by Fortune® and Great Place to Work for its commitment to innovation, trust and creating a great place to work for all. WWT provides products and services to large enterprise, global service provider and public sector clients in up to 130 countries across six continents. Softchoice, a World Wide Technology company, supports commercial and SMB markets in the U.S. and Canada. Want to work with highly motivated individuals on high-performance teams? Join WWT today!" Then "What is the Solutions Consulting & Engineering (SC&E) Team and why join? Solutions Consulting & Engineering is an organization that is Customer Focused and Solutions Led. We deliver end-to-end and emerging solutions to drive customer satisfaction, increase profitability and growth. Our success is enabled by our world-class management consulting, delivery excellence and engineering brilliance. Our goal is to bring together business acumen with full-stack technical know-how to develop innovative solutions for our clients' most complex challenges." Then "Position Overview: As a Principal in our AI and Cyber Risk & Strategy practice, you will lead high-impact advisory engagements at the intersection of artificial intelligence adoption, cybersecurity risk, and enterprise governance. You will serve as a trusted advisor to Chief Information Security Officers (CISOs), Chief Risk Officers (CROs), Chief Information Officers (CIOs), Chief Technology Officers (CTOs), and Boards of Directors at Fortune 500 and Global 2000 organizations, translating emerging AI regulation, evolving threat landscapes, and governance gaps into board-ready risk strategy and executable remediation roadmaps. In this role, you will lead engagement teams, own client delivery and relationships, and drive the growth of the AI and Cyber Risk & Strategy practice. You will bring deep technical and regulatory expertise together with executive-level communication skills to help clients responsibly adopt AI while strengthening their overall cyber resilience and risk posture. Principals lead the day-to-day delivery and growth of AI and Cyber Risk advisory work for large, complex organizations. They build material executive and board level business cases, cultivate senior client relationships, and bring the full breadth of the firm's capabilities to bear on clients' most critical AI governance and cybersecurity challenges." We can combine into a few paragraphs. Next Responsibilities (Essential Functions): list each bullet. We need to preserve all bullet points. Let's extract them: - Lead client engagements delivering AI risk assessments, AI governance framework design (e.g., NIST AI RMF, ISO/IEC 42001), and enterprise cyber risk assessments (CIS, NIST CSF 2.0, NIST 800.53, ISO 27001) for large, regulated organizations. - Advise CISOs, CROs, CIOs, and CTOs on AI-specific threat vectors — including model poisoning, data leakage, shadow AI, third-party/foundation model risk, and adversarial AI — and integrate these into enterprise risk strategy. - Design AI governance operating models, risk appetite statements, and control frameworks, and present findings and recommendations directly to Audit Committees, Risk Committees, and Boards. - Own end-to-end delivery on complex engagements: project ownership, workplan management, quality of analysis and deliverables, and overall client satisfaction. - Serve as the primary day-to-day point of contact — the "face" of the engagement — for senior client stakeholders and internal firm leadership. - Lead, manage, coach, and develop cross-functional engagement teams across the firm - Build and maintain trusted-advisor relationships with C-suite clients; identify and cultivate follow-on engagement opportunities and expanded scopes of work. - Business development: Lead proposals, RFP responses, and statement-of-work creation, including scope, deliverables, timelines, and pricing. - Develop practice methodologies, accelerators, and intellectual property for AI risk quantification, AI regulatory compliance (EU AI Act, NIST AI RMF, sector-specific guidance), and cyber risk offerings. - Develop thought leadership — white papers, points of view, and client briefings - Own engagement economics, including utilization, profitability, and revenue growth targets for the practice. - Understand the firm's broader service portfolio and proactively introduce and cross-sell adjacent offerings to expand account footprint. Note there is a stray comma after "Lead, manage, coach, and develop cross-functional engagement teams across the firm" maybe missing period but keep. Now Qualifications: we need to include all details. From "Qualifications:" block: "Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree or MBA preferred. 8-12 years of experience in cybersecurity, technology risk, or AI governance consulting, with significant experience in client-facing leadership and strategic advisory roles (Big 4 or equivalent advisory experience strongly preferred). Demonstrated experience advising and presenting to C-suite and Board-level stakeholders. AI & Cybersecurity Expertise: Deep knowledge of AI governance principles, cybersecurity fundamentals, emerging AI threat models, and risk management methodologies. Leadership: Strong leadership and strategic planning skills to drive engagement teams and cross-practice initiatives to results. Client Management: Executive presence and excellent relationship-building skills to engage senior executives, Boards, and Audit/Risk Committees. Problem-Solving: Ability to translate complex technical AI and cyber risk issues into business, financial, and regulatory risk language. Engagement Management: Proficiency managing large-scale, multi-workstream advisory engagements, including scope, budget, staffing, and timeline management. Substantial consulting experience, preferably with big four and strategy consulting firms Framework and Regulatory experience in one or more of the following: NIST AI RMF, ISO/IEC 42001, EU AI Act, NIST CSF 2.0, NIST 800-53, NIST 800-171, NIST 800-30, ISO 27001/27002, HIPAA, GDPR, FFIEC, CIS Controls, COBIT, HITRUST, CSA CCM, AICPA SOC 2, Third-Party/Vendor Risk Management, IT Risk Management Industry Experience - significant experience in one or more of the following industries: Financial Services, Health & Life Sciences, Utilities & Energy, Oil & Gas, Retail, Public Sector, Technology, Mergers & Acquisitions AI And Cybersecurity Risk Experience Requirements Candidate must be experienced across the AI governance and cybersecurity risk lifecycle, including: AI system risk and impact assessments, AI governance program development, AI policy and control design, model risk management, algorithmic bias and transparency review, and cybersecurity domains such as Identity & Access Management (IAM), Cloud Security, Data Protection,