Cybersecurity Manager - Cloud Security

Boston Consulting Group; Lisboa; On-site; EUR 70,000 - 110,000; Full time

Job summary

Boston Consulting Group seeks a seasoned Cloud Security professional to join the Security Operations team in Lisbon. You will lead cloud security assessments across AWS, Azure, and Google Cloud, working with senior security and engineering leaders to prioritize risks and strengthen BCG's cloud security posture.

You will investigate vulnerabilities, develop practical remediation recommendations, and help evolve cloud security processes and automation across the organization.

Qualifications

• 6-8 years of information security experience with hands-on cloud security.
• Experience with AWS, Azure, or Google Cloud.
• Foundational knowledge of cloud security posture management tools (Wiz or Prisma Cloud).
• Ability to independently assess complex cloud vulnerabilities and misconfigurations.
• Experience evaluating cloud architecture, IAM, and network security risks.
• Strong analytical judgment and communication skills.

Responsibilities

• Independently own complex cloud security assessments and remediation priorities.
• Analyze exposure, exploitability, access permissions, and affected assets to inform prioritization.
• Develop evidence-based risk assessments and remediation recommendations with senior leaders.
• Investigate cloud security issues and collaborate with engineering teams for remediation.
• Track remediation progress and validate outcomes with cross-functional teams.
• Share findings and guidance to promote consistent security practices.

Skills

Cloud security understanding

Vulnerability assessment

Risk prioritization

Stakeholder communication

Tools

Wiz

Prisma Cloud

Job description

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You’ll Do

You will join BCG's Security Operations team within Information Security and Risk Management, focusing on Attack Surface Management. In this role, you will help protect BCG's global cloud environment by assessing security risks across AWS, Azure, and Google Cloud. You will independently lead complex cloud security assessments, working with senior security and engineering leaders to establish risk-based remediation priorities and strengthen BCG's cloud security posture.

You will apply your hands-on cloud security expertise to investigate vulnerabilities and misconfigurations, evaluate their technical and business impact, and translate findings into actionable recommendations. Working closely with engineering and security teams, you will guide risk assessment discussions, monitor remediation progress, and validate outcomes. You will also lead defined improvements to cloud security assessment processes, monitoring capabilities, and automation, helping BCG identify and manage emerging risks more effectively.

You Will

• Independently own complex assessments of cloud security findings, vulnerabilities, and misconfigurations using cloud-native and cloud security posture management tools.
• Evaluate security risks by analyzing exposure, exploitability, access permissions, affected assets, and potential business impact to inform prioritization.
• Develop evidence-based risk assessments and recommend remediation priorities, working with senior security and engineering leaders to align on risk treatment decisions.
• Investigate cloud security issues, identify root causes, and partner with engineering teams to develop practical, sustainable remediation recommendations.
• Coordinate with cloud engineering, platform engineering, and security architecture teams to track remediation progress, assess residual risks, and validate resolution.
• Communicate complex security findings and recommendations to technical teams and senior leaders, enabling informed decisions and clear accountability.
• Lead defined initiatives to improve cloud security assessment processes, risk prioritization, monitoring, controls, and automation, addressing recurring risks and strengthening operational effectiveness.
• Share technical expertise and practical guidance with colleagues, promoting consistent security practices, knowledge sharing, and effective cross-functional collaboration

What You’ll Bring

• 6-8 years of information security experience, including substantial hands-on cloud security experience.
• Strong practical knowledge of security controls and configurations across AWS, Azure, or Google Cloud.
• Foundational knowledge of cloud security posture management tools, such as Wiz or Prisma Cloud.
• Ability to independently assess complex cloud vulnerabilities, misconfigurations, and associated security risks.
• Experience evaluating cloud architecture, identity and access management, and network security risks.
• Strong analytical judgment to prioritize vulnerabilities, recommend remediation actions, and validate resolution.
• Clear communication skills to explain technical risks and influence engineering decisions across teams.

Who You’ll Work With

You will be part of BCG's Security Operations team within Information Security and Risk Management, specializing in Attack Surface Management. You will collaborate with colleagues across BCG's global cloud engineering, platform engineering, and security architecture teams to assess security risks, align remediation priorities, and validate outcomes. Working closely with security and engineering partners, you will contribute to cross-functional security initiatives that strengthen BCG's cloud security posture and support consistent, effective security practices across the organization.

#ISRM

Additional info

Preferred certifications are helpful but not required, including AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CCSP, or Certified Kubernetes Security Specialist.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E - Verify Employer. Click here for more information on E-Verify.