BCG Platinion | Manager, Cybersecurity

Locations
:
Atlanta | Austin | Boston | Brooklyn | Chicago | Dallas | Denver | Detroit | Durham | Houston | Los Angeles | Miami | Minneapolis | Nashville | New York | Philadelphia | Pittsburgh | Summit | Washington

Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day.

BCG Platinion’s presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time‑sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past.

At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionise approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change, transforming strategies into leading‑edge tech platforms, at scale.

• Technical experts: critical thinkers and extensive cybersecurity expertise that drives innovative solutions.
• Innovators: leverage cutting‑edge cybersecurity approaches and tactics to create customised solutions for clients.
• Change agents: make change happen across an organisation, aligning and onboarding teams to implement new cybersecurity processes and toolsets, and optimise their practices.
• Collaborative: interdisciplinary team players who seek alignment and establish relationships ranging from cross‑functional stakeholder groups to existing security teams.

• Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship.
• Analyzing cybersecurity standards, regulatory requirements, and best practices and translating them into meaningful recommendations tailored to a client’s unique environment.
• Communicating complex and technical concepts in concise, business‑value‑centric written form.
• Implementing cybersecurity transformation and culture‑change initiatives.
• Conducting cybersecurity assessments, including gap analysis and roadmap development in multiple contexts.
• Developing cybersecurity strategies, policies, processes, and procedures to protect clients’ internal infrastructure and their customers.
• Understanding data protection, data security, and privacy drivers that influence organisations today.
• Developing cybersecurity business strategies for technology product vendors integrated into the overall business strategy and increasing revenue and profits.
• Facilitating board and senior‑management cybersecurity awareness workshops.
• Embedding product security and Dev Sec Ops  practices into software development life cycles, system designs, and IT architectures.
• Utilising cyber risk quantification to reduce uncertainty and improve executive decision‑making.
• Creating and facilitating table‑top exercises.
• Delivering operational resilience through incident response, business continuity, and disaster recovery planning.

• 6+ years of practical experience in cybersecurity consulting or management (with teams of five or more) in a variety of sectors and contexts.
• BS in cybersecurity, information systems, mathematics, natural sciences, business management, or a related degree.
• Hands‑on experience with or extensive knowledge of:
• Developing cybersecurity strategies or policies.
• Quantifying and managing cybersecurity risk.
• Leading security assessments.
• Designing, transforming, implementing, and running cybersecurity programmes.
• Developing security architectures.
• Integrating security into applications and systems.
• Implementing cloud security.
• Managing third‑party and…