Locations: Atlanta Austin Boston Brooklyn Chicago Dallas Denver Detroit Durham Houston Miami Minneapolis Nashville New York Philadelphia Pittsburgh Summit Washington Who We Are Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day. BCG's Tech and Digital Advantage (TDA) practice focuses on helping clients deliver competitive advantage and business superior performance through data, technology and digital. BCG Platinion sits within the TDA practice and is at the heart of the strategic impact we have with our clients. Our consultants and experts globally work across all industries and provide deep experience and expertise in a wide variety of topics including Tech Advisory and Delivery, Architecture, Enterprise Solutions and Packaged Software, Cybersecurity, and Technology Risk Management. Our Tech Advisory and Delivery Chapter within BCG Platinion helps clients solve some of their most challenging problems through the development of superior IT concepts and tech solutions. The ideal candidate is both passionate as a consultant and technologist, and can bring their expertise to help develop customized, innovative client solutions. At BCG, we bring together the right people to conquer complexity, drive material change, and initiate positive, long-term impact. Explore our BCG Culture and Values for more information. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. What You'll Do Cybersecurity Consultants at BCG Platinion: Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. You're Good At: Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship. Analyzing cybersecurity standards, regulatory requirements, and best practices and translating that into a meaningful set of recommendations tailored to a client's unique environment and circumstances. Communicating complex and technical concepts in a concise and business value-centric written form. Implementing cybersecurity transformation and culture change initiatives. Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security. Developing cybersecurity strategies, policies, processes, and procedures to protect clients' internal infrastructure and their customers. Understanding data protection, data security, and privacy drivers that influence organizations today. Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits. Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops. Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures. Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making. Creating and facilitating table-top exercises. Delivering operational resilience through incident response, business continuity, and disaster recovery planning. What You'll Bring 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts. BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree. Hands-on experience with, or extensive knowledge of some of the following: Developing cybersecurity strategies or policies. Quantifying and managing cybersecurity risk. Leading security assessments. Designing, transforming, implementing, and running cybersecurity programs. Developing security architectures. Integrating security into applications and systems. Implementing cloud security. Managing cybersecurity risk arising from third parties and the supply chain. Designing / implementing identity and access management. Developing and upskilling a cybersecurity workforce. Delivering cybersecurity culture change, awareness, and training. Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc. Designing / implementing vulnerability management, including conducting vulnerability assessments. Performing penetration testing, incident management, BCP, and/or DRP. Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle. Working knowledge of at least two different cybersecurity frameworks: NIST Cybersecurity Framework. C2M2 NIST SP 800-53 and companion publications. ISO/IEC 27000 family of standards, etc. Cloud Security Alliance CCM. Team-oriented attitude. Strong communication and presentation skills. Outstanding analytical and conceptual skills. Results-orientated mindset. Confidence and persuasiveness. GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses. Business-fluent written and spoken English language skills. Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects. Additional info What We Offer: At BCG, we care about our people, and offer best in class benefits to support you personally and professionally including: An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications. A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment. For U.S. Applicants: The base compensation for this role is $190,000 in USD. In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG's Profit Sharing and Retirement Fund (PSRF) contribution. BCG also provides a market leading benefits package described below. At BCG, we are committed to offering a comprehensive benefit program that includes everything our employees and their families need to be well and live life to the fullest. We pay the full cost of medical, dental, and vision coverage for employees - and their eligible family members. That's zero dollars in premiums taken from employee paychecks. All our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children. $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs. Dental coverage, including up to $5,000 (USD) in orthodontia benefits. Vision insurance with coverage for both glasses and contact lenses annually. Reimbursement for gym memberships and other fitness activities. Fully vested retirement contributions made annually, whether you contribute or not. Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years. Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement. Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage. To learn more about our employee benefits please check our Benefits page. Boston Consulting Group is an Equal Opportunity Employer . click apply for full job details
11/14/2026
Full time
Locations: Atlanta Austin Boston Brooklyn Chicago Dallas Denver Detroit Durham Houston Miami Minneapolis Nashville New York Philadelphia Pittsburgh Summit Washington Who We Are Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day. BCG's Tech and Digital Advantage (TDA) practice focuses on helping clients deliver competitive advantage and business superior performance through data, technology and digital. BCG Platinion sits within the TDA practice and is at the heart of the strategic impact we have with our clients. Our consultants and experts globally work across all industries and provide deep experience and expertise in a wide variety of topics including Tech Advisory and Delivery, Architecture, Enterprise Solutions and Packaged Software, Cybersecurity, and Technology Risk Management. Our Tech Advisory and Delivery Chapter within BCG Platinion helps clients solve some of their most challenging problems through the development of superior IT concepts and tech solutions. The ideal candidate is both passionate as a consultant and technologist, and can bring their expertise to help develop customized, innovative client solutions. At BCG, we bring together the right people to conquer complexity, drive material change, and initiate positive, long-term impact. Explore our BCG Culture and Values for more information. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. What You'll Do Cybersecurity Consultants at BCG Platinion: Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. You're Good At: Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship. Analyzing cybersecurity standards, regulatory requirements, and best practices and translating that into a meaningful set of recommendations tailored to a client's unique environment and circumstances. Communicating complex and technical concepts in a concise and business value-centric written form. Implementing cybersecurity transformation and culture change initiatives. Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security. Developing cybersecurity strategies, policies, processes, and procedures to protect clients' internal infrastructure and their customers. Understanding data protection, data security, and privacy drivers that influence organizations today. Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits. Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops. Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures. Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making. Creating and facilitating table-top exercises. Delivering operational resilience through incident response, business continuity, and disaster recovery planning. What You'll Bring 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts. BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree. Hands-on experience with, or extensive knowledge of some of the following: Developing cybersecurity strategies or policies. Quantifying and managing cybersecurity risk. Leading security assessments. Designing, transforming, implementing, and running cybersecurity programs. Developing security architectures. Integrating security into applications and systems. Implementing cloud security. Managing cybersecurity risk arising from third parties and the supply chain. Designing / implementing identity and access management. Developing and upskilling a cybersecurity workforce. Delivering cybersecurity culture change, awareness, and training. Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc. Designing / implementing vulnerability management, including conducting vulnerability assessments. Performing penetration testing, incident management, BCP, and/or DRP. Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle. Working knowledge of at least two different cybersecurity frameworks: NIST Cybersecurity Framework. C2M2 NIST SP 800-53 and companion publications. ISO/IEC 27000 family of standards, etc. Cloud Security Alliance CCM. Team-oriented attitude. Strong communication and presentation skills. Outstanding analytical and conceptual skills. Results-orientated mindset. Confidence and persuasiveness. GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses. Business-fluent written and spoken English language skills. Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects. Additional info What We Offer: At BCG, we care about our people, and offer best in class benefits to support you personally and professionally including: An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications. A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment. For U.S. Applicants: The base compensation for this role is $190,000 in USD. In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG's Profit Sharing and Retirement Fund (PSRF) contribution. BCG also provides a market leading benefits package described below. At BCG, we are committed to offering a comprehensive benefit program that includes everything our employees and their families need to be well and live life to the fullest. We pay the full cost of medical, dental, and vision coverage for employees - and their eligible family members. That's zero dollars in premiums taken from employee paychecks. All our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children. $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs. Dental coverage, including up to $5,000 (USD) in orthodontia benefits. Vision insurance with coverage for both glasses and contact lenses annually. Reimbursement for gym memberships and other fitness activities. Fully vested retirement contributions made annually, whether you contribute or not. Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years. Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement. Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage. To learn more about our employee benefits please check our Benefits page. Boston Consulting Group is an Equal Opportunity Employer . click apply for full job details
Locations: Atlanta Austin Boston Brooklyn Chicago Dallas Denver Detroit Durham Houston Miami Minneapolis Nashville New York Philadelphia Pittsburgh Summit Washington Who We Are Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day. BCG's Tech and Digital Advantage (TDA) practice focuses on helping clients deliver competitive advantage and business superior performance through data, technology and digital. BCG Platinion sits within the TDA practice and is at the heart of the strategic impact we have with our clients. Our consultants and experts globally work across all industries and provide deep experience and expertise in a wide variety of topics including Tech Advisory and Delivery, Architecture, Enterprise Solutions and Packaged Software, Cybersecurity, and Technology Risk Management. Our Tech Advisory and Delivery Chapter within BCG Platinion helps clients solve some of their most challenging problems through the development of superior IT concepts and tech solutions. The ideal candidate is both passionate as a consultant and technologist, and can bring their expertise to help develop customized, innovative client solutions. At BCG, we bring together the right people to conquer complexity, drive material change, and initiate positive, long-term impact. Explore our BCG Culture and Values for more information. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. What You'll Do Cybersecurity Consultants at BCG Platinion: Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. You're Good At: Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship. Analyzing cybersecurity standards, regulatory requirements, and best practices and translating that into a meaningful set of recommendations tailored to a client's unique environment and circumstances. Communicating complex and technical concepts in a concise and business value-centric written form. Implementing cybersecurity transformation and culture change initiatives. Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security. Developing cybersecurity strategies, policies, processes, and procedures to protect clients' internal infrastructure and their customers. Understanding data protection, data security, and privacy drivers that influence organizations today. Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits. Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops. Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures. Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making. Creating and facilitating table-top exercises. Delivering operational resilience through incident response, business continuity, and disaster recovery planning. What You'll Bring 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts. BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree. Hands-on experience with, or extensive knowledge of some of the following: Developing cybersecurity strategies or policies. Quantifying and managing cybersecurity risk. Leading security assessments. Designing, transforming, implementing, and running cybersecurity programs. Developing security architectures. Integrating security into applications and systems. Implementing cloud security. Managing cybersecurity risk arising from third parties and the supply chain. Designing / implementing identity and access management. Developing and upskilling a cybersecurity workforce. Delivering cybersecurity culture change, awareness, and training. Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc. Designing / implementing vulnerability management, including conducting vulnerability assessments. Performing penetration testing, incident management, BCP, and/or DRP. Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle. Working knowledge of at least two different cybersecurity frameworks: NIST Cybersecurity Framework. C2M2 NIST SP 800-53 and companion publications. ISO/IEC 27000 family of standards, etc. Cloud Security Alliance CCM. Team-oriented attitude. Strong communication and presentation skills. Outstanding analytical and conceptual skills. Results-orientated mindset. Confidence and persuasiveness. GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses. Business-fluent written and spoken English language skills. Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects. Additional info What We Offer: At BCG, we care about our people, and offer best in class benefits to support you personally and professionally including: An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications. A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment. For U.S. Applicants: The base compensation for this role is $190,000 in USD. In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG's Profit Sharing and Retirement Fund (PSRF) contribution. BCG also provides a market leading benefits package described below. At BCG, we are committed to offering a comprehensive benefit program that includes everything our employees and their families need to be well and live life to the fullest. We pay the full cost of medical, dental, and vision coverage for employees - and their eligible family members. That's zero dollars in premiums taken from employee paychecks. All our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children. $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs. Dental coverage, including up to $5,000 (USD) in orthodontia benefits. Vision insurance with coverage for both glasses and contact lenses annually. Reimbursement for gym memberships and other fitness activities. Fully vested retirement contributions made annually, whether you contribute or not. Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years. Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement. Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage. To learn more about our employee benefits please check our Benefits page. Boston Consulting Group is an Equal Opportunity Employer . click apply for full job details
11/14/2026
Full time
Locations: Atlanta Austin Boston Brooklyn Chicago Dallas Denver Detroit Durham Houston Miami Minneapolis Nashville New York Philadelphia Pittsburgh Summit Washington Who We Are Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day. BCG's Tech and Digital Advantage (TDA) practice focuses on helping clients deliver competitive advantage and business superior performance through data, technology and digital. BCG Platinion sits within the TDA practice and is at the heart of the strategic impact we have with our clients. Our consultants and experts globally work across all industries and provide deep experience and expertise in a wide variety of topics including Tech Advisory and Delivery, Architecture, Enterprise Solutions and Packaged Software, Cybersecurity, and Technology Risk Management. Our Tech Advisory and Delivery Chapter within BCG Platinion helps clients solve some of their most challenging problems through the development of superior IT concepts and tech solutions. The ideal candidate is both passionate as a consultant and technologist, and can bring their expertise to help develop customized, innovative client solutions. At BCG, we bring together the right people to conquer complexity, drive material change, and initiate positive, long-term impact. Explore our BCG Culture and Values for more information. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. What You'll Do Cybersecurity Consultants at BCG Platinion: Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. You're Good At: Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship. Analyzing cybersecurity standards, regulatory requirements, and best practices and translating that into a meaningful set of recommendations tailored to a client's unique environment and circumstances. Communicating complex and technical concepts in a concise and business value-centric written form. Implementing cybersecurity transformation and culture change initiatives. Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security. Developing cybersecurity strategies, policies, processes, and procedures to protect clients' internal infrastructure and their customers. Understanding data protection, data security, and privacy drivers that influence organizations today. Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits. Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops. Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures. Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making. Creating and facilitating table-top exercises. Delivering operational resilience through incident response, business continuity, and disaster recovery planning. What You'll Bring 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts. BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree. Hands-on experience with, or extensive knowledge of some of the following: Developing cybersecurity strategies or policies. Quantifying and managing cybersecurity risk. Leading security assessments. Designing, transforming, implementing, and running cybersecurity programs. Developing security architectures. Integrating security into applications and systems. Implementing cloud security. Managing cybersecurity risk arising from third parties and the supply chain. Designing / implementing identity and access management. Developing and upskilling a cybersecurity workforce. Delivering cybersecurity culture change, awareness, and training. Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc. Designing / implementing vulnerability management, including conducting vulnerability assessments. Performing penetration testing, incident management, BCP, and/or DRP. Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle. Working knowledge of at least two different cybersecurity frameworks: NIST Cybersecurity Framework. C2M2 NIST SP 800-53 and companion publications. ISO/IEC 27000 family of standards, etc. Cloud Security Alliance CCM. Team-oriented attitude. Strong communication and presentation skills. Outstanding analytical and conceptual skills. Results-orientated mindset. Confidence and persuasiveness. GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses. Business-fluent written and spoken English language skills. Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects. Additional info What We Offer: At BCG, we care about our people, and offer best in class benefits to support you personally and professionally including: An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications. A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment. For U.S. Applicants: The base compensation for this role is $190,000 in USD. In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG's Profit Sharing and Retirement Fund (PSRF) contribution. BCG also provides a market leading benefits package described below. At BCG, we are committed to offering a comprehensive benefit program that includes everything our employees and their families need to be well and live life to the fullest. We pay the full cost of medical, dental, and vision coverage for employees - and their eligible family members. That's zero dollars in premiums taken from employee paychecks. All our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children. $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs. Dental coverage, including up to $5,000 (USD) in orthodontia benefits. Vision insurance with coverage for both glasses and contact lenses annually. Reimbursement for gym memberships and other fitness activities. Fully vested retirement contributions made annually, whether you contribute or not. Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years. Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement. Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage. To learn more about our employee benefits please check our Benefits page. Boston Consulting Group is an Equal Opportunity Employer . click apply for full job details
Locations: Atlanta Austin Boston Brooklyn Chicago Dallas Denver Detroit Durham Houston Miami Minneapolis Nashville New York Philadelphia Pittsburgh Summit Washington Who We Are Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day. BCG's Tech and Digital Advantage (TDA) practice focuses on helping clients deliver competitive advantage and business superior performance through data, technology and digital. BCG Platinion sits within the TDA practice and is at the heart of the strategic impact we have with our clients. Our consultants and experts globally work across all industries and provide deep experience and expertise in a wide variety of topics including Tech Advisory and Delivery, Architecture, Enterprise Solutions and Packaged Software, Cybersecurity, and Technology Risk Management. Our Tech Advisory and Delivery Chapter within BCG Platinion helps clients solve some of their most challenging problems through the development of superior IT concepts and tech solutions. The ideal candidate is both passionate as a consultant and technologist, and can bring their expertise to help develop customized, innovative client solutions. At BCG, we bring together the right people to conquer complexity, drive material change, and initiate positive, long-term impact. Explore our BCG Culture and Values for more information. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. What You'll Do Cybersecurity Consultants at BCG Platinion: Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. You're Good At: Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship. Analyzing cybersecurity standards, regulatory requirements, and best practices and translating that into a meaningful set of recommendations tailored to a client's unique environment and circumstances. Communicating complex and technical concepts in a concise and business value-centric written form. Implementing cybersecurity transformation and culture change initiatives. Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security. Developing cybersecurity strategies, policies, processes, and procedures to protect clients' internal infrastructure and their customers. Understanding data protection, data security, and privacy drivers that influence organizations today. Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits. Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops. Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures. Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making. Creating and facilitating table-top exercises. Delivering operational resilience through incident response, business continuity, and disaster recovery planning. What You'll Bring 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts. BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree. Hands-on experience with, or extensive knowledge of some of the following: Developing cybersecurity strategies or policies. Quantifying and managing cybersecurity risk. Leading security assessments. Designing, transforming, implementing, and running cybersecurity programs. Developing security architectures. Integrating security into applications and systems. Implementing cloud security. Managing cybersecurity risk arising from third parties and the supply chain. Designing / implementing identity and access management. Developing and upskilling a cybersecurity workforce. Delivering cybersecurity culture change, awareness, and training. Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc. Designing / implementing vulnerability management, including conducting vulnerability assessments. Performing penetration testing, incident management, BCP, and/or DRP. Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle. Working knowledge of at least two different cybersecurity frameworks: NIST Cybersecurity Framework. C2M2 NIST SP 800-53 and companion publications. ISO/IEC 27000 family of standards, etc. Cloud Security Alliance CCM. Team-oriented attitude. Strong communication and presentation skills. Outstanding analytical and conceptual skills. Results-orientated mindset. Confidence and persuasiveness. GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses. Business-fluent written and spoken English language skills. Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects. Additional info What We Offer: At BCG, we care about our people, and offer best in class benefits to support you personally and professionally including: An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications. A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment. For U.S. Applicants: The base compensation for this role is $190,000 in USD. In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG's Profit Sharing and Retirement Fund (PSRF) contribution. BCG also provides a market leading benefits package described below. At BCG, we are committed to offering a comprehensive benefit program that includes everything our employees and their families need to be well and live life to the fullest. We pay the full cost of medical, dental, and vision coverage for employees - and their eligible family members. That's zero dollars in premiums taken from employee paychecks. All our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children. $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs. Dental coverage, including up to $5,000 (USD) in orthodontia benefits. Vision insurance with coverage for both glasses and contact lenses annually. Reimbursement for gym memberships and other fitness activities. Fully vested retirement contributions made annually, whether you contribute or not. Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years. Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement. Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage. To learn more about our employee benefits please check our Benefits page. Boston Consulting Group is an Equal Opportunity Employer . click apply for full job details
11/12/2026
Full time
Locations: Atlanta Austin Boston Brooklyn Chicago Dallas Denver Detroit Durham Houston Miami Minneapolis Nashville New York Philadelphia Pittsburgh Summit Washington Who We Are Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day. BCG's Tech and Digital Advantage (TDA) practice focuses on helping clients deliver competitive advantage and business superior performance through data, technology and digital. BCG Platinion sits within the TDA practice and is at the heart of the strategic impact we have with our clients. Our consultants and experts globally work across all industries and provide deep experience and expertise in a wide variety of topics including Tech Advisory and Delivery, Architecture, Enterprise Solutions and Packaged Software, Cybersecurity, and Technology Risk Management. Our Tech Advisory and Delivery Chapter within BCG Platinion helps clients solve some of their most challenging problems through the development of superior IT concepts and tech solutions. The ideal candidate is both passionate as a consultant and technologist, and can bring their expertise to help develop customized, innovative client solutions. At BCG, we bring together the right people to conquer complexity, drive material change, and initiate positive, long-term impact. Explore our BCG Culture and Values for more information. About BCG Platinion BCG Platinion's presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time-sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionize approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change transforming strategies into leading-edge tech platforms, at scale. What You'll Do Cybersecurity Consultants at BCG Platinion: Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. You're Good At: Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship. Analyzing cybersecurity standards, regulatory requirements, and best practices and translating that into a meaningful set of recommendations tailored to a client's unique environment and circumstances. Communicating complex and technical concepts in a concise and business value-centric written form. Implementing cybersecurity transformation and culture change initiatives. Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security. Developing cybersecurity strategies, policies, processes, and procedures to protect clients' internal infrastructure and their customers. Understanding data protection, data security, and privacy drivers that influence organizations today. Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits. Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops. Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures. Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making. Creating and facilitating table-top exercises. Delivering operational resilience through incident response, business continuity, and disaster recovery planning. What You'll Bring 6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts. BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree. Hands-on experience with, or extensive knowledge of some of the following: Developing cybersecurity strategies or policies. Quantifying and managing cybersecurity risk. Leading security assessments. Designing, transforming, implementing, and running cybersecurity programs. Developing security architectures. Integrating security into applications and systems. Implementing cloud security. Managing cybersecurity risk arising from third parties and the supply chain. Designing / implementing identity and access management. Developing and upskilling a cybersecurity workforce. Delivering cybersecurity culture change, awareness, and training. Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc. Designing / implementing vulnerability management, including conducting vulnerability assessments. Performing penetration testing, incident management, BCP, and/or DRP. Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle. Working knowledge of at least two different cybersecurity frameworks: NIST Cybersecurity Framework. C2M2 NIST SP 800-53 and companion publications. ISO/IEC 27000 family of standards, etc. Cloud Security Alliance CCM. Team-oriented attitude. Strong communication and presentation skills. Outstanding analytical and conceptual skills. Results-orientated mindset. Confidence and persuasiveness. GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses. Business-fluent written and spoken English language skills. Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects. Additional info What We Offer: At BCG, we care about our people, and offer best in class benefits to support you personally and professionally including: An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications. A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment. For U.S. Applicants: The base compensation for this role is $190,000 in USD. In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG's Profit Sharing and Retirement Fund (PSRF) contribution. BCG also provides a market leading benefits package described below. At BCG, we are committed to offering a comprehensive benefit program that includes everything our employees and their families need to be well and live life to the fullest. We pay the full cost of medical, dental, and vision coverage for employees - and their eligible family members. That's zero dollars in premiums taken from employee paychecks. All our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children. $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs. Dental coverage, including up to $5,000 (USD) in orthodontia benefits. Vision insurance with coverage for both glasses and contact lenses annually. Reimbursement for gym memberships and other fitness activities. Fully vested retirement contributions made annually, whether you contribute or not. Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years. Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement. Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage. To learn more about our employee benefits please check our Benefits page. Boston Consulting Group is an Equal Opportunity Employer . click apply for full job details
Job Description Job Description Senior Cloud Security Specialist 100% ONSITE in Washington DC Per Federal contract U.S. Citizenship Required Must be able to pass enhanced FBI background screening (criminal, financial and finger printing) for Public Trust clearance Performance Period: June 2026- Dec , with the possibility of multi-year extension based on performance W-2 or C2C Deadline to apply May 5th PROJECT DESCRIPTION: The IT Security Engineering team is seeking a Senior Cloud Security Specialist with deep expertise in AWS cloud services, cloud-native security tools and services. BACKGROUND: We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: Required Experience: Minimum 5 years hands-on AWS security experience Personnel Qualifications AWS Certified Security - Specialty (strongly preferred) AWS Certified Solutions Architect - Professional or Associate Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 Possess deep analytical, problem-solving, and troubleshooting experience, to independently resolve complex security challenges. Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) Self-motivated and able to work independently Strong attention to detail The Consultant shall deliver, but not limited to, the following: Conduct regular security reviews of cloud infrastructure deployed by engineering teams Evaluate infrastructure-as-code against security standards Review and validate compliance with security policies and best practices Assess adherence to AWS Well-Architected Framework security pillar Identify and document security misconfigurations and non-compliant controls Develop and maintain security posture dashboards Create or update security configuration guides and playbooks Offer technical consultation to engineering teams on secure implementation Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. Develop and update AWS security configuration standards Conduct security training sessions for engineering teams Present findings and recommendations in team meetings Identify opportunities to automate security assessments Recommend security tooling improvements PLACE OF PERFORMANCE: On-site at FRB locations, Washington, DC CITIZEN STATUS: U.S. Citizenship is required per Federal Contract INTERVIEW: Selected candidates will participate in a phone screening. Those that pass the phone screening may be invited to an in-person interview. The use of video conference tools (e.g., MS Teams or WebEx) can be used in accordance with agency guidelines. Ref:
10/07/2026
Full time
Job Description Job Description Senior Cloud Security Specialist 100% ONSITE in Washington DC Per Federal contract U.S. Citizenship Required Must be able to pass enhanced FBI background screening (criminal, financial and finger printing) for Public Trust clearance Performance Period: June 2026- Dec , with the possibility of multi-year extension based on performance W-2 or C2C Deadline to apply May 5th PROJECT DESCRIPTION: The IT Security Engineering team is seeking a Senior Cloud Security Specialist with deep expertise in AWS cloud services, cloud-native security tools and services. BACKGROUND: We are seeking a Senior Cloud Security Specialist to support the Security Engineering team within the IT division. This team is responsible for the strategy, design, deployment, and maintenance of effective security solutions in cloud, local, and hybrid environments. REQUIREMENTS: The candidate shall also demonstrate the knowledge and experience below: Required Experience: Minimum 5 years hands-on AWS security experience Personnel Qualifications AWS Certified Security - Specialty (strongly preferred) AWS Certified Solutions Architect - Professional or Associate Demonstrated experience implementing secure, scalable AWS cloud architectures following industry best security practices and security frameworks. Demonstrated federal experience and comprehensive knowledge in adopting and implementing federal cybersecurity requirements, including but not limited to the NIST Cybersecurity Framework, OMB Memorandum M-22-09, NIST SP 800-53 Possess deep analytical, problem-solving, and troubleshooting experience, to independently resolve complex security challenges. Proven ability to provide technical security consultation and advisory services with a proactive approach to identifying potential issues, raising questions, and engaging in open dialogue with team members and stakeholders to ensure security objectives are met. Strong understanding of security concepts and technologies related to Identity and Access Management (IAM), security engineering, network security design, security operations, security architecture, general engineering processes, cloud security, data loss protection, zero trust, DevSecOps and vulnerability management. Technical skills in AWS cloud security, security engineering, DevSecOps, scripting, and Infrastructure-as-code (IaC) Self-motivated and able to work independently Strong attention to detail The Consultant shall deliver, but not limited to, the following: Conduct regular security reviews of cloud infrastructure deployed by engineering teams Evaluate infrastructure-as-code against security standards Review and validate compliance with security policies and best practices Assess adherence to AWS Well-Architected Framework security pillar Identify and document security misconfigurations and non-compliant controls Develop and maintain security posture dashboards Create or update security configuration guides and playbooks Offer technical consultation to engineering teams on secure implementation Implement AWS security controls and services to ensure proper security hardening and other security engineering tasks. Develop and update AWS security configuration standards Conduct security training sessions for engineering teams Present findings and recommendations in team meetings Identify opportunities to automate security assessments Recommend security tooling improvements PLACE OF PERFORMANCE: On-site at FRB locations, Washington, DC CITIZEN STATUS: U.S. Citizenship is required per Federal Contract INTERVIEW: Selected candidates will participate in a phone screening. Those that pass the phone screening may be invited to an in-person interview. The use of video conference tools (e.g., MS Teams or WebEx) can be used in accordance with agency guidelines. Ref:
