Cyber Senior Manager - ASM Vulnerability Management - Patching

Deloitte • Jersey City, NJ

166d • $163,400 - $322,100

About The Position

Deloitte & Touche LLP is hiring a Cyber Senior Manager for its Cyber Defense & Resilience Continuous Threat Exposure Management (CTEM) team. The role helps clients identify, assess, and reduce their attack surface across traditional and AI-driven technology environments by leading remediation efforts and working with cross-functional stakeholders to deliver services aligned with business and security priorities. The position is available in 26 U.S. locations, and recruiting for the role ends on 02/01/2027.

The Senior Manager leads teams building and operating client CTEM programs, with a focus on exposure-based vulnerability remediation and patching. The role also contributes to proposals and business development, advises clients on AI-related exposure and risk, and drives growth of the Defensive Attack Surface Management (ASM) practice. It includes leadership of cyber operations and managed security services engagements, including delivery, financial and resource management, executive client advisory, operational strategy, and development of engagement teams.

Requirements

• At least 10 years of experience in information technology, information security, or both.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a related field.
• Experience leading vulnerability management, patch management, or continuous threat exposure management remediation programs.
• Experience leading vulnerability remediation and patch management across Linux, Windows, middleware, and applications at scale in complex enterprise environments; experience with BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys.
• Experience automating remediation workflows using PowerShell, Bash, Python, JSON, Ansible, Terraform, or a combination of these.
• Experience using ITSM or CMDB platforms, such as ServiceNow, to coordinate remediation and report exposure reduction.
• Experience applying risk-based vulnerability remediation approaches that prioritize exploitability, asset criticality, and business risk in addition to severity scores.
• Experience modernizing client ASM programs, including maturing processes, tooling, and reporting to improve visibility and reduce exposure.
• Experience assessing AI and frontier AI risk considerations, including prompt injection, data poisoning, and model supply chain risk, and applying them to exposure management programs.
• One of the following cybersecurity certifications: CISSP, CISM, CCISO, OSCP, or a GIAC certification.
• Experience leading sales pursuits, RFP responses, and solution development for cyber managed services engagements.
• Experience translating technical security findings into client recommendations and executive presentations.
• Experience coaching and mentoring Managers into senior leadership roles.
• Experience coordinating activities across multiple cyber workstreams and engagements.
• Ability to travel 50% on average, based on the work and clients and industries/sectors served.
• Must be legally authorized to work in the United States without employer sponsorship, now or at any time in the future.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to mentor and provide clear guidance to others.

Nice To Haves

• Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a related field.
• Experience in a consulting environment or with a Big 4 firm.
• Experience with ServiceNow workflows, automation, or orchestration.
• Experience with one or more of the NIST Cybersecurity Framework, Center for Internet Security, ISO 27001, or Cloud Security Alliance Cloud Controls Matrix.
• Experience supporting proposals, statements of work, or work orders.
• Experience with AI security governance frameworks, including the NIST AI Risk Management Framework or ISO/IEC 42001, or experience supporting clients on responsible AI adoption.
• Experience assessing or advising on AI/ML-specific attack surface as part of broader ASM or CTEM programs.

Responsibilities

• Lead teams that build and operate client CTEM programs.
• Manage exposure-based remediation and patching activities aligned with CTEM priorities.
• Lead vulnerability and patch management operations across infrastructure, middleware, and applications.
• Prioritize remediation using threat intelligence, exploitability, attack paths, asset criticality, and exposure data.
• Support exception management, incident-driven response activities, and process improvements to reduce cyber risk.
• Develop vulnerability management reporting metrics and dashboards that track remediation progress, exposure reduction, and program maturity.
• Contribute to proposals and points of view, including developing proposals, building staffing and pricing models, writing statements of work, and growing sales and business pipeline.
• Advise clients on exposure and risk considerations introduced by AI and large language model deployments, including AI-specific attack surface, data exposure, and model and supply chain risk.
• Drive Defensive ASM practice growth through sales pursuits, RFP responses, client solution presentations, vendor relationships, and adoption of cybersecurity methodologies, architectures, and technologies.
• Lead a portfolio of cyber operations and managed security services engagements, including project delivery, financial forecasting, margin management, resource planning, SLA performance, and engagement governance.
• Serve as the senior escalation point and trusted advisor to client CISOs, CIOs, and other executives for security incidents, strategic risk decisions, executive briefings, and post-incident reviews.
• Set operational and technical strategy across threat and vulnerability management, CTEM, and patch management, coordinating with security operations and incident response, endpoint security, application security, identity and access management, and network security.
• Lead, coach, and develop Managers, technical leads, and analysts across engagements and geographies; oversee engagement onboarding, transitions, reporting, and escalation management.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and various factors including individual and organizational performance.
• Opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship, including on-the-job learning and formal development programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior