Global Cybersecurity Specialist - Security Operations

Boston Consulting Group; Lisboa; On-site; EUR 45,000 - 70,000; Full time

Job summary

Boston Consulting Group in Lisbon seeks an IAM security professional to reduce identity-related risks. You will analyze identity data, identify risks, and support remediation with practical actions. Collaborate with IAM, cloud security, and GRC teams to ensure effective identity security operations.

The role emphasizes risk analysis, playbooks maintenance, and clear communication with technical and business teams across a global organization. This position is on-site in Lisbon.

Qualifications

• 2-4 years of IAM experience with cloud identity and security analytics.
• Knowledge of privileged access models and identity entitlements.
• Ability to analyze identity relationships and communicate findings clearly.
• Experience assessing security findings and recommending remediation actions.

Responsibilities

• Analyze and triage identity and entitlement findings across human and non-human identities.
• Assess findings based on risk severity, business context, and impact.
• Identify identity-related risks, including excessive privileges and conflicting entitlements.
• Translate identity relationships into actionable findings for technical and business teams.
• Recommend remediation actions, including access adjustments and privilege restrictions.
• Collaborate with IAM, cloud security, application owners, and GRC teams to support remediation.
• Monitor remediation progress and validate risk reduction.

Skills

IAM experience

Identity governance

Cloud security

Communication skills

Tools

Microsoft Entra ID

Active Directory

Okta

Azure/AWS/GCP basics

Job description

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963.

Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

You will help reduce identity-based security risks across BCG by analyzing identity and entitlement data, identifying potential risks, and supporting practical remediation actions. Rather than focusing on traditional security operations center (SOC) alert monitoring, this role emphasizes identity intelligence, risk analysis, and continuous improvement of security practices.

Working with colleagues across cybersecurity and technology teams, you will assess identity-related findings, recommend appropriate actions, and help track remediation progress. You will contribute to consistent processes and playbooks that strengthen the effectiveness of identity security operations.

• Analyze and triage identity and entitlement findings across human and non-human identities, including privileged accounts.
• Assess findings based on risk severity, business context, and potential impact, distinguishing meaningful risks from lower-priority findings.
• Identify identity-related risks, including excessive privileges, inappropriate access, and conflicting entitlements.
• Translate identity relationship and graph-based analysis into clear, actionable findings for technical and business teams.
• Recommend practical remediation actions, including access adjustments and privilege restrictions, seeking guidance when appropriate.
• Collaborate with IAM, cloud security, application owners, and governance, risk, and compliance teams to support remediation.
• Monitor remediation progress, follow up on outstanding actions, and help validate that identified risks have been reduced.
• Maintain and improve identity risk playbooks, escalation procedures, and severity classification guidelines.

What You'll Bring

• 2-4 years of relevant experience in identity and access management (IAM), identity governance with a focus on cloud identity and security analytics.
• Working knowledge of privileged access models, identity entitlements, and common access-related security risks.
• Ability to analyze identity relationships, identify potential risks, and communicate findings clearly.
• Experience assessing security findings and recommending practical remediation actions.
• Strong collaboration and communication skills across technical and business teams in a global environment.
• Familiarity with identity platforms such as Microsoft Entra ID, Active Directory, or Okta is preferred.
• Knowledge of identity and access management concepts within AWS, Azure, or Google Cloud is preferred.

Who You'll Work With

You will work closely with colleagues across Security Operations, Identity and Access Management (IAM), Cloud Security, and Governance, Risk, and Compliance (GRC). You will collaborate with application owners and platform teams globally to understand identity-related risks, coordinate remediation activities, and monitor progress toward resolution. Through these partnerships, you will contribute to consistent security practices and help strengthen BCG's identity security posture.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E - Verify Employer. Click here for more information on E-Verify.