Global Information Security & Client Assurance Lead

Boston Consulting Group; City Of London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Boston Consulting Group in London seeks a Global Information Security Manager within the Client Assurance Services team to lead security due diligence efforts for strategic clients and help communicate BCG’s security posture and controls.

You will collaborate with Information Security, Legal, Risk and client-facing teams to deliver high-quality responses, maintain CAS knowledge assets, and improve tools and templates for consistent service delivery.

Qualifications

• 5–8 years of experience in information security, cybersecurity, risk management, or compliance.
• Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities.
• Strong knowledge of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR and regional data protection regulations.
• Professional certifications such as CISSP, CISM, CISA, Security+, or ISO 27001 Lead Auditor/Implementer are preferred.

Responsibilities

• Serve as a key contact for clients and prospects conducting information security assessments.
• Respond to security questionnaires, RFPs, and audit requests; participate in client calls and workshops; provide clear explanations of security controls, certifications, and risk management practices.
• Support the maintenance and continuous improvement of CAS tools, templates, knowledge repositories, and automation initiatives.
• Partner with Information Security, Legal, Risk, Compliance, and client-facing teams to gather accurate information and ensure compliant responses to inquiries.
• Help clients understand BCG’s compliance with ISO 27001, SOC 2, GDPR, NIST and translate technical concepts into business-relevant assurance responses.
• Maintain and enhance the CAS knowledge base, standard response library, and supporting documentation to ensure materials remain accurate and accessible.

Skills

Information security

Risk management

Compliance

Client communication

Stakeholder management

Auditing

Education

CISSP

CISM

CISA

Security+

ISO 27001 Lead Auditor/Implementer

Job description

Boston Consulting Group in London seeks a Global Information Security Manager within the Client Assurance Services team to lead security due diligence efforts for strategic clients and help communicate BCG’s security posture and controls.

You will collaborate with Information Security, Legal, Risk and client-facing teams to deliver high-quality responses, maintain CAS knowledge assets, and improve tools and templates for consistent service delivery.