BCG Platinion | Principal, Cybersecurity

Who We Are

Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle the most important challenges and capture the greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day.

BCG Platinion sits within the Tech and Digital Advantage (TDA) practice and focuses on helping clients deliver competitive advantage and superior performance through data, technology and digital. Our consultants and experts work across all industries with deep experience in Tech Advisory and Delivery, Architecture, Enterprise Solutions and Packaged Software, Cybersecurity, and Technology Risk Management. We deliver business value through innovative technology at a rapid pace, balancing vision with a pragmatic path to change.

• Technical experts. Critical thinkers with extensive cybersecurity expertise that drives innovative solutions.
• Innovators. Understand and leverage cutting‑edge cybersecurity approaches and tactics to create customized solutions for clients.
• Change agents. Know how to make change happen across an organization, align and onboard teams to implement new cybersecurity processes and toolsets, and guide an organization to optimize its cybersecurity practices.
• Collaborative. Interdisciplinary team players who seek alignment and establish relationships ranging from cross‑functional stakeholder groups to existing security teams.

• Develop cybersecurity strategies, policies, processes, and operating models to protect clients’ internal infrastructure and their customers.
• Serve as a trusted advisor to senior client stakeholders, presenting strategic recommendations, training, and reporting to executive audiences.
• Lead multiple concurrent engagements, ensuring successful end‑to‑end delivery of complex, high‑impact cybersecurity programs.
• Scope, structure, and oversee engagements across diverse client environments and stakeholder groups.
• Develop high‑quality proposals, reports, and executive presentations.

• Develop and lead client proposals end‑to‑end, bringing original thought leadership to each engagement.
• Own the full proposal process—from concept to delivery—contributing original insights and thought leadership alongside core responsibilities.
• Shape and expand cybersecurity offerings and capabilities; contribute to building and scaling the practice.
• Recruit, mentor, and develop top talent to strengthen team capabilities and market differentiation.

• Mentorship, leading and offering guidance to other members of the team to develop talent, provide direction, and oversee output and projects.
• Management experience, leading team members through the career development process and providing timely and accurate performance feedback.
• Demonstrate a growth mindset and promote continuous learning across cybersecurity and adjacent technology domains.

• 8+ years of practical experience in cybersecurity consulting or project management (with teams of five persons or more) in a financial, healthcare, telecommunications, industrial or government organization.
• BS in mathematics, natural sciences, information technology, business management, or similar degree.
• 4+ years of experience managing projects and decision processes at large organizations.
• Hands‑on experience with, or extensive knowledge of some of the following:
  • Cybersecurity strategy, governance, and policy development.
  • Cyber risk management and security assessments.
  • Design and implementation of enterprise cybersecurity programs.
  • Security architecture and secure system development lifecycle (SDLC) integration.
  • AI platform security and emerging technology risk.
  • Cloud, Big Data, and mobile security.
  • Cyber supply chain and third‑party risk management.
  • Identity and access management (IAM).
  • Continuous monitoring and vulnerability management.
  • Incident response, penetration testing, SIEM, BCP, and DRP.
  • Cybersecurity workforce development and awareness programs.
• Broa…