Senior AI Tech Consultant, Cybersecurity

BCG Platinion is seeking a Senior AI Tech Consultant (Cybersecurity) to take end-to-end responsibility for a module within client engagements and apply advanced cybersecurity methodologies to strategic cybersecurity and digital risk questions. Based in Nashville, TN on an onsite basis, this role combines transformation work, assessments, and operational resilience to help clients address organizational and operational challenges.

As a senior member of the team, you will support cybersecurity transformation and culture change initiatives while helping leadership teams make better decisions through risk quantification and clear, business-focused communication. The position also involves embedding security into modern software development and technology architectures across the client lifecycle.

• Own an individual module within BCG client engagements and develop specialized knowledge to solve client problems.
• Apply generalist consulting skills to strategic cybersecurity and digital risk topics across multiple client contexts.
• Use advanced cybersecurity methodologies, tools, and techniques to address strategic, organizational, managerial, and operational issues for clients.
• Decompose how technology supports business strategy and translate that relationship into cybersecurity implications.
• Analyze cybersecurity requirements, current tools, and best practices, then convert findings into tailored recommendations for a client’s environment.
• Communicate complex technical concepts in written form with a concise, business value focus.
• Implement cybersecurity transformation and culture change initiatives.
• Conduct cybersecurity assessments, including gap analysis and roadmap development, across areas such as organizations, product development, and cloud security.
• Develop cybersecurity strategies, policies, processes, and procedures to protect internal infrastructure and customer needs.
• Create cybersecurity business strategies for technology product vendors that align with overall organizational business strategy and support revenue and profit goals.
• Work with leadership teams, including facilitating board and senior management cybersecurity awareness workshops.
• Embed product security and Dev Sec Ops  practices into software development life cycles, system designs, and IT architectures.
• Use cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making.
• Create and facilitate table-top exercises.
• Deliver operational resilience through incident response, business continuity, and disaster recovery planning.

• 4+ years of practical experience in cybersecurity consulting or cybersecurity management with teams of five persons or more, across a variety of sectors and contexts.
• BS in cybersecurity, information systems, mathematics, natural sciences, business management, or a similar degree.
• Hands-on experience, or extensive knowledge, developing cybersecurity strategies or policies.
• Hands-on experience, or extensive knowledge, quantifying and managing cybersecurity risk.
• Hands-on experience, or extensive knowledge, designing, transforming, implementing, and running cybersecurity programs.
• Hands-on experience, or extensive knowledge, assessing cybersecurity risks in AI platforms.
• Hands-on experience, or extensive knowledge, integrating security into applications and systems.
• Hands-on experience, or extensive knowledge, implementing cloud security.
• Hands-on experience, or extensive knowledge, managing third-party and supply chain cybersecurity risk.
• Hands-on experience, or extensive knowledge, designing and implementing identity and access management.
• Hands-on experience, or extensive knowledge, developing and upskilling a cybersecurity workforce.
• Hands-on experience, or extensive knowledge, delivering cybersecurity culture change, awareness, and training.
• Hands-on experience, or extensive knowledge, designing continuous monitoring programs that incorporate SIEM tools, APT hunting, and UBA.
• Hands-on experience, or extensive knowledge, with vulnerability management, including conducting vulnerability assessments.
• Hands-on experience, or extensive knowledge, performing penetration testing, incident management, BCP, and/or DRP.
• Broad knowledge of cybersecurity technologies across the organizational and acquisition lifecycle.
• Working knowledge of at least two frameworks or standards: NIST Cybersecurity Framework; C2M2; NIST SP 800-53 and companion publications; ISO/IEC 27000 family of standards;
  Cloud…