Cyber Manager – ASM Vulnerability Management & Patching

About the role

Deloitte’s Cyber Defense & Resilience CTEM team is seeking an experienced Cyber Manager to lead exposure‑based remediation and patching across client environments. You will work with cross‑functional stakeholders to reduce attack surface and improve cyber resilience.

Key responsibilities

• Manage vulnerability and patch management operations across infrastructure, middleware and applications, using tools such as BigFix, SCCM, Red Hat Satellite, WSUS, Tenable, Rapid7 or Qualys.
• Prioritize remediation using threat intelligence, exploitability, asset criticality and exposure data; support exception handling and incident‑driven response.
• Develop reporting metrics, dashboards and client deliverables that track remediation progress and exposure reduction.
• Contribute to proposals, staffing models and statements of work, and advise clients on AI‑related attack surface and supply‑chain risk.

Required profile

• 10+ years of IT or information security experience, including leading vulnerability and patch management programs.
• Strong written and verbal communication, attention to detail, and ability to mentor junior practitioners.
• Ability to travel up to 50% and work independently in a fast‑paced environment.
• Legal authorization to work in the United States without sponsorship.

Required skills

• Hands‑on experience with patching tools: BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, WSUS, Tenable, Rapid7, Qualys.
• Scripting/automation: PowerShell, Bash, Python, JSON, Ansible, Terraform.
• ServiceNow or similar ITSM/CMDB platforms for remediation coordination.
• Risk‑based vulnerability prioritization and exposure management.
• Knowledge of AI/ML security risks and related frameworks.
• Relevant certifications (CISSP, CEH, OSCP, GIAC, Qualys Specialist) preferred.