Global Information Security & Client Assurance Lead

The Boston Consulting Group GmbH; Lisboa; Presencial; EUR 90 000 - 120 000; Tempo integral

Resumo da oferta

Boston Consulting Group seeks a Global Information Security Manager to join CAS, supporting due diligence activities for strategic clients. You will work with Information Security, Legal, Risk, and client teams to communicate BCG's security posture and controls across a global client portfolio.

You will help maintain CAS tools, templates, and knowledge assets, ensuring consistent, high‑quality responses and documentation while aligning with ISO 27001, SOC 2, GDPR, and NIST frameworks.

Qualificações

• Minimum 5–8 years of experience in information security, risk management, compliance, or related field.
• Experience supporting client‑facing information security, assurance, audits, compliance, or advisory activities.
• Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR.
• Experience responding to client security questionnaires, due diligence requests, audits or RFPs with clear communication to non‑technical audiences.
• Relevant certifications such as CISSP, CISM, CISA, Security+ or ISO 27001 Lead Auditor/Implementer preferred.
• Strong communication, organization, and stakeholder management skills across global teams.
• Prior experience in professional services, financial services, technology, or consulting preferred.
• Fluent written and spoken English and German required.

Responsabilidades

• Serve as a key contact for clients conducting information security assessments; respond to questionnaires, RFPs, and audit requests; explain BCG's controls and risk practices.
• Support maintenance and improvement of CAS tools, templates, knowledge repositories, and automation initiatives.
• Collaborate with Information Security, Legal, Risk, Compliance and client‑facing teams to ensure accurate, compliant responses.
• Help clients understand BCG's compliance with ISO 27001, SOC 2, GDPR, NIST and translate security concepts into business‑relevant responses.
• Support continuous improvement of CAS through knowledge management and documentation updates.
• Maintain and enhance the CAS knowledge base, standard response library, and supporting documentation.

Conhecimentos

Information security

Risk management

Compliance

Audits & due diligence

Security standards

Communication

Stakeholder management

Formação académica

Bachelor's degree in a related field

Professional certifications (CISSP/CISM/CISA)

Descrição da oferta de emprego

Boston Consulting Group seeks a Global Information Security Manager to join CAS, supporting due diligence activities for strategic clients. You will work with Information Security, Legal, Risk, and client teams to communicate BCG's security posture and controls across a global client portfolio.

You will help maintain CAS tools, templates, and knowledge assets, ensuring consistent, high‑quality responses and documentation while aligning with ISO 27001, SOC 2, GDPR, and NIST frameworks.