Global Information Security & Client Assurance Lead

Boston Consulting Group (BCG); Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Boston Consulting Group is seeking a Global Information Security Manager within the Client Assurance Services (CAS) team. You will support strategic clients with information security due diligence and communicate BCG's security posture to clients and prospects globally.

You will collaborate with Information Security, Legal, Risk, and client-facing teams to develop CAS tools, templates, and knowledge assets, ensuring high-quality responses and compliant, consistent client engagements across the

Qualifications

• 5–8 years of experience in information security, cybersecurity, risk management or related field.
• Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities.
• Strong understanding of ISO 27001, SOC 2, NIST CSF, GDPR and regional data protection regulations.
• Experience responding to client security questionnaires, due diligence requests, audits or RFPs.
• Certifications such as CISSP, CISM, CISA, Security+ or ISO 27001 Lead Auditor/Implementer preferred.
• Excellent communication, organization, and stakeholder management; able to collaborate across global teams.
• Experience in professional services/financial services/tech/consulting preferred.
• Fluent written and spoken English; another European language preferred.

Responsibilities

• Serve as a key contact for clients and prospects for information security assessments.
• Respond to security questionnaires, RFPs, and audit requests; explain controls.
• Support CAS tools, templates, knowledge repositories, and automation initiatives.
• Collaborate with Information Security, Legal, Risk, Compliance, and client teams.
• Help clients understand compliance with ISO 27001, SOC 2, GDPR, NIST and related frameworks.
• Maintain high-quality documentation, templates, and best practices for consistent service delivery.
• Maintain the CAS knowledge base and response library.

Skills

Information security

Risk management

Compliance

Client-facing communication

Stakeholder management

Cross-functional collaboration

Education

CISSP

CISM

CISA

ISO 27001 Lead Auditor/Implementer

Job description

Boston Consulting Group is seeking a Global Information Security Manager within the Client Assurance Services (CAS) team. You will support strategic clients with information security due diligence and communicate BCG's security posture to clients and prospects globally.

You will collaborate with Information Security, Legal, Risk, and client-facing teams to develop CAS tools, templates, and knowledge assets, ensuring high-quality responses and compliant, consistent client engagements across the