Cyber Senior Manager – ASM Vulnerability Management & Patching

About the role

Deloitte’s Cyber Defense & Resilience CTEM team is seeking an experienced cybersecurity professional to lead vulnerability and patch management programs for enterprise clients. The role involves driving remediation, advising on AI‑related risk, and managing a portfolio of cyber operations.

Key responsibilities

• Lead client CTEM programs, managing exposure‑based remediation and patching across infrastructure, middleware and applications.
• Prioritize remediation using threat intelligence, exploitability, asset criticality and exposure data.
• Develop reporting metrics and dashboards to track remediation progress and program maturity.
• Advise clients on AI and large language model risk considerations.
• Drive practice growth through sales pursuits, RFP responses and vendor relationships.
• Oversee project delivery, financial forecasting, margin management and engagement governance.

Required profile

• 10+ years of IT or information security experience.
• Bachelor’s degree in a related technical field.
• Proven leadership of vulnerability and patch management programs at scale.
• Strong communication, relationship‑building and mentoring abilities.
• Ability to work independently and manage multiple tasks in a fast‑paced environment.

Required skills

• Experience with tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, WSUS, Tenable, Rapid7 or Qualys.
• Automation using PowerShell, Bash, Python, JSON, Ansible or Terraform.
• Use of ServiceNow or similar ITSM/CMDB platforms for remediation coordination.
• Risk‑based vulnerability remediation methodology.
• Knowledge of AI risk vectors (prompt injection, data poisoning, supply‑chain risk).
• One of the following certifications: CISSP, CISM, CCISO, OSCP, GIAC.