BCG Platinion | Manager, Cybersecurity

About the role

BCG Platinion’s Tech Advisory and Delivery Chapter helps clients solve some of their most challenging problems through the development of superior IT concepts and tech solutions. The ideal candidate is both passionate as a consultant and technologist, and can bring their expertise to help develop customized, innovative client solutions.

Responsibilities

• Analyze cybersecurity standards, regulatory requirements, and best practices and translate that into a meaningful set of recommendations tailored to a client’s unique environment and circumstances.
• Communicate complex and technical concepts in a concise and business value-centric written form.
• Implement cybersecurity transformation and culture change initiatives.
• Conduct cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security.
• Develop cybersecurity strategies, policies, processes, and procedures to protect clients’ internal infrastructure and their customers.
• Understand data protection, data security, and privacy drivers that influence organizations today.
• Develop cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits.
• Work with leadership teams, including facilitating board and senior management cybersecurity awareness workshops.
• Embed product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures.
• Utilize cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making.
• Create and facilitate table-top exercises.
• Deliver operational resilience through incident response, business continuity, and disaster recovery planning.

Requirements

• 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts.
• BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree.

Qualifications

• Hands-on experience with, or extensive knowledge of some of the following:
  • Developing cybersecurity strategies or policies.
  • Quantifying and managing cybersecurity risk.
  • Leading security assessments.
  • Designing, transforming, implementing, and running cybersecurity programs.
  • Developing security architectures.
  • Integrating security into applications and systems.
  • Implementing cloud security.
  • Managing cybersecurity risk arising from third parties and the supply chain.
  • Designing / implementing identity and access management.
  • Developing and upskilling a cybersecurity workforce.
  • Delivering cybersecurity culture change, awareness, and training.
  • Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc.
  • Designing / implementing vulnerability management, including conducting vulnerability assessments.
  • Performing penetration testing, incident management, BCP, and/or DRP.
• Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle.
• Working knowledge of at least two different cybersecurity frameworks:
  • NIST Cybersecurity Framework
  • C2M2
  • NIST SP 800-53 and companion publications
  • ISO/IEC 27000 family of standards
  • Cloud Security Alliance CCM
• Team-oriented attitude.
• Strong communication and presentation skills.
• Outstanding analytical and conceptual skills.
• Results-orientated mindset.
• Confidence and persuasiveness.
• GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses.
• Business-fluent written and spoken English language skills.
• Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites; the amount of travel will depend on client needs and nature of projects.

Benefits

• An opportunity to work organically across disciplines and across BCG, offering a unified and unrivaled opportunity that combines strategic thinking with hands-on applications.
• A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment.
• For U.S. Applicants:
  • Base compensation of $190,000 in USD.
  • Annual discretionary performance bonus.
  • BCG’s Profit Sharing and Retirement Fund (PSRF) contribution.
• Zero-dollar health insurance premiums for employees, spouses, and children.
• $10 copays for doctor visits, urgent care, and generic prescriptions.
• Dental coverage including up to $5,000 in orthodontia benefits.
• Vision insurance with annual coverage for glasses and contact lenses.
• Reimbursement for gym memberships and other fitness activities.
• Fully vested retirement contributions made annually.
• Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years.
• Paid Parental Leave and family benefits such as elective egg freezing, surrogacy, and adoption reimbursement.