Global Cybersecurity Director - Architecture

Boston Consulting Group (BCG); Lisboa; Presencial; EUR 110 000 - 150 000; Tempo integral

Resumo da oferta

Boston Consulting Group (BCG) seeks an Infrastructure Security Architecture Lead to own architecture, standards, and Zero Trust direction for global infrastructure. You will line‑manage a team of architects across identity, network, device, and data pillars and ensure coherence, quality, and maturity of security architecture.

You will collaborate with engineering, cloud, identity, and security teams to uphold enterprise security controls.

Qualificações

• Bachelor’s degree or equivalent practical experience in a relevant field.
• 10+ years in security architecture, security engineering, or infrastructure security.
• Experience managing or leading a technical team.
• Experience in audit‑sensitive or regulated enterprises with governance processes.
• Strong understanding of Zero Trust (NIST SP 800‑207) and hybrid cloud environments.

Responsabilidades

• Own security architecture strategy, reference architectures, and target-state roadmaps across identity, network, device, and data pillars.
• Line-manage and grow the Architects team; set objectives and performance
• Ensure architectural coherence across pillars and mentor for complex design decisions
• Represent ISRM governance in enterprise forums and drive risk-based prioritization
• Leverage AI-assisted tooling for standards development with human oversight

Conhecimentos

Security architecture

People management

Stakeholder influence

Zero Trust

AI-assisted security tooling

Formação académica

Bachelor’s degree in a relevant field or equivalent practical experience

Ferramentas

Azure

AWS

GCP

Descrição da oferta de emprego

What You'll Do

As the Infrastructure Security Architecture Lead, you will own the security architecture, standards, and Zero Trust direction for BCG’s core infrastructure across the identity, network, device, and data pillars, line‑manage and grow the team of architects aligned to each pillar, and be accountable for the coherence, quality, and maturity of the architecture that protects the firm’s global infrastructure.

Key Responsibilities

• Line‑manage, develop, and grow the architects aligned to the Secure Identity, Secure Network, Secure Device, and Secure Data pillars; set objectives, manage performance, and build the team out to full coverage.
• Establish consistent ways of working and quality bars so the domain operates as a coherent function, and act as mentor and escalation point for complex design decisions.
• Balance architectural capacity across pillars toward the highest‑risk and highest‑priority initiatives.
• Own the security architecture strategy, reference architectures, and target‑state roadmap across the identity, network, device, and data pillars, advancing ZTMM maturity aligned to NIST SP 800‑207 and the CISA Zero Trust Maturity Model.
• Ensure architectural coherence across pillars, resolving cross‑cutting dependencies (identity lifecycle propagation, certificate lifecycle, entitlement governance) rather than allowing point solutions to harden into enterprise patterns.
• Set the direction for strategic target architectures per control family, socialized with Enterprise Architecture and traceable to enterprise strategic targets.
• Lead the creation and maintenance of control‑family standards in alignment with Security Governance, Risk, and Compliance (SGRC), socializing standards with configuration item owners for viability before enforcement and agreeing control disposition with SGRC and SAVE.
• Own security architecture reviews and exception dispositions for the domain, ensuring decisions are consistent, defensible, and traceable to ISRM governance.
• Represent Infrastructure Security Architecture in enterprise governance forums (Change Advisory Boards, Design Authorities) and advocate for risk‑based prioritization across the Security Portfolio.
• Maintain and leverage the team’s AI‑assisted tooling for standards development and control‑alignment review, with appropriate human oversight.
• Serve as the architecture counterpart to the infrastructure engineering squads: validate feasibility and effectiveness of controls through implementation without assuming delivery ownership, and hold engineering accountable for meeting SecArch requirements.
• Reinforce the ISRM operating model: Security Architecture designs and governs; Security Operations owns monitoring, SIEM, and detection; assurance and audit sit with SAVE and SGRC. Specify the telemetry requirements needed for the domain’s services to be observable.

You’re Good At

• Building and developing a high‑performing architecture team, and growing a function from a small base into full coverage.
• Building consensus while maintaining architectural integrity across complex, cross‑domain technology initiatives.
• Making defensible architectural decisions under ambiguity and time pressure, and making them stick.
• Influencing senior stakeholders across engineering, Enterprise Architecture, and security leadership in a matrixed global organization.
• Translating enterprise security strategy into practical standards and implementable engineering requirements.

What You'll Bring

• Bachelor’s degree in a relevant field or equivalent practical experience.
• 10+ years in security architecture, security engineering, or infrastructure security, including demonstrated architecture responsibility across more than one infrastructure domain.
• Prior people‑management or team‑lead experience, or clear readiness to take on line management of a technical team.
• Experience operating in large, audit‑sensitive, or regulated enterprise environments with formal governance and exception processes.
• Strong understanding of Zero Trust architecture (NIST SP 800‑207, CISA ZTMM), enterprise control frameworks, and hybrid cloud environments (Azure, AWS, GCP).
• Breadth across at least two of the infrastructure pillars (identity, network, device, data), with the ability to lead architects who hold deeper specialization in each.
• Command of the governance and lifecycle disciplines that cut across pillars: identity lifecycle management, certificate and key lifecycle, and entitlement governance.
• Experience applying AI‑assisted tools to security architecture work, with a clear understanding of LLM capabilities, limitations, and the need for human oversight.

Preferred Qualifications

• Experience standing up or scaling a security architecture function or team.
• Hands‑on architecture background in one or more of: enterprise identity (Entra ID, Okta, PAM), network security (SSE, ZTNA, segmentation), endpoint/device security, or data protection.
• Professional certifications such as CISSP, SABSA, TOGAF, or relevant cloud security certifications.

Who You'll Work With

You will lead the Infrastructure Security Architecture team within Information Security Risk Management (ISRM), managing the architects aligned to each infrastructure pillar and reporting to the Senior Director of Cybersecurity Architecture. You will own the security strategy, architectural standards, and governance that guide the design and evolution of BCG’s core infrastructure platforms across identity, network, device, and data. You will collaborate closely with engineering, cloud, identity, infrastructure, and security teams across BCG’s global technology organization to ensure security controls are consistently designed, implemented, and governed across the infrastructure domain. You will partner with Enterprise Architecture, Security Operations, Risk Management, and architecture peers to strengthen Zero Trust capabilities, advance security maturity, and support enterprise‑wide cybersecurity initiatives.

Additional Info

Regular, Full‑Time (local employment terms apply).

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E‑Verify Employer.