Global Cybersecurity Senior Manager – Architecture

BCG is seeking a Global Cybersecurity Senior Manager to lead security architecture and governance across enterprise endpoints, mobile devices, servers, containers, and cloud workloads. This role supports the firm’s Zero Trust strategy by shaping secure, resilient infrastructure design throughout the solution lifecycle.

• Define and maintain security architecture standards for enterprise endpoints, mobile devices, servers, containers, and cloud workloads, including configuration baselines, hardening requirements, endpoint protection, and security compliance.
• Anchor standards in an authoritative, continuously reconciled device and asset inventory, and develop reference architectures that combine device trust, endpoint compliance, and identity-based access controls to strengthen Zero Trust protections across BCG.
• Establish architectural requirements for enterprise device management platforms, including Microsoft Intune and Jamf
  , as well as endpoint detection and response (EDR), device compliance, and security controls that enable trusted access to enterprise resources.
• Define requirements for quantum-resistant full-disk encryption and PQ-aware key management across the device estate, including crypto-agile hardening standards that support transition to post-quantum algorithms without re-architecting.
• Guide security requirements for endpoint privilege management, local administrator access, just-in-time privilege elevation, server hardening, and patch management across on-premises and cloud environments.
• Define security architecture requirements for containerized workloads, server protection, and cloud-native application protection platforms (CNAPP, including Wiz), including standards for workload visibility, vulnerability management, configuration hardening, and security posture.
• Advance device security controls through configuration drift detection and automated remediation workflows, partnering with engineering to transition device governance from manual review to continuous, automated validation.
• Conduct security architecture reviews for device and workload initiatives, including issuing dispositions, conditions, and architectural decision records. Collaborate with the Secure Devices Engineering Squad, global technology teams, and Security Operations to integrate security requirements and validate control effectiveness through implementation.
• Route exceptions through ISRM governance with documented compensating controls and risk acceptance, and elevate unresolved architectural items.
• Establish device and endpoint telemetry requirements in partnership with Security Operations, which owns SIEM integration, detection engineering, and continuous monitoring.

• 6–10 years of experience in security architecture, infrastructure security, or security engineering.
• Deep expertise in endpoint security architecture, including Microsoft Intune
  , Jamf
  , EDR, and device management.
• Experience securing servers, containers, and cloud workloads using hardening standards and cloud security platforms.
• Strong knowledge of Zero Trust architecture, endpoint privilege management, CNAPP platforms (e.g.,
  Wiz
  ), and enterprise security frameworks, including container security benchmarks (
  NIST SP 800-190
  , CIS
  ).
• Proven ability to apply architectural authority and independent, risk-based judgment while communicating technical decisions clearly and building consensus across global engineering, security, and technology teams.

• Microsoft Intune
• Jamf
• EDR
• Zero Trust
• Quantum-resistant full-disk encryption
• PQ-aware key management
• Containerized workloads
• Cloud-native application protection platforms (CNAPP)
• Wiz
• SIEM
• NIST SP 800-190
• CIS

Location: Atlanta, GA (onsite).
Sal…