Global Information Security & Client Assurance Lead

Boston Consulting Group; Portugal; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Boston Consulting Group (BCG) is seeking a Global Information Security Manager within the Client Assurance Services (CAS) team in Portugal. You will support information security due diligence for strategic clients, respond to security questionnaires, RFPs, and audits, and collaborate with cross-functional teams to communicate BCG's security posture and controls.

The role emphasizes maintaining CAS tools, templates, and knowledge assets, while ensuring quality, consistency, and alignment with

Qualificações

• 5-8 years of experience in information security, cybersecurity, risk management, or compliance.
• Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities.
• Strong understanding of information security frameworks including ISO 27001, SOC 2, NIST CSF, GDPR.
• Experience responding to client security questionnaires, due diligence requests, audits, or RFPs.
• Professional certifications such as CISSP, CISM, CISA, ISO 27001 Lead Auditor/Implementer preferred.
• Strong communication, organization, and stakeholder management skills.

Responsabilidades

• Client Due Diligence Support: Serve as a key contact for clients and prospects conducting information security assessments of BCG.
• CAS Tool & Process Support: Support maintenance and improvement of CAS tools, templates, knowledge bases, and automation initiatives.
• Stakeholder Collaboration: Partner with Information Security, Legal, Risk, Compliance, and client-facing teams to gather accurate security posture information.
• Risk & Compliance Support: Help clients understand BCG's compliance with ISO 27001, SOC 2, GDPR, and NIST, translating concepts into business responses.
• Quality & Continuous Improvement: Identify opportunities to enhance response quality and efficiency; maintain documentation and best practices.
• Knowledge Management & Documentation: Maintain CAS knowledge base and standard response library.

Conhecimentos

Information security

Client communication

Stakeholder management

Risk & compliance

ISO 27001

SOC 2

GDPR

RFP responses

Descrição da oferta de emprego

Boston Consulting Group (BCG) is seeking a Global Information Security Manager within the Client Assurance Services (CAS) team in Portugal. You will support information security due diligence for strategic clients, respond to security questionnaires, RFPs, and audits, and collaborate with cross-functional teams to communicate BCG's security posture and controls.

The role emphasizes maintaining CAS tools, templates, and knowledge assets, while ensuring quality, consistency, and alignment with