Global Risk Manager

Boston Consulting Group (BCG); Lisboa; On-site; EUR 90,000 - 130,000; Full time

Job summary

Boston Consulting Group is seeking a Global Digital Enterprise Risk Manager to strengthen ERM across IT Services, Cyber, Data and AI risks. You will partner with Digital, IT, Legal, Compliance, and other functions to translate complex risk into clear, actionable insights and drive cross-functional risk initiatives.

You will develop executive dashboards, KRIs, and governance processes, enabling proactive risk management across a global organization while maintaining strong stakeholder

Qualifications

• 7+ years of experience in enterprise risk management, technology risk, cyber risk, IT services risk, or related discipline.
• Experience assessing and managing IT services, cyber, data, and AI-related risks within complex, global organizations.
• Knowledge of ERM frameworks (COSO ERM, ISO 31000), security frameworks (NIST CSF, ISO 27001), AI risk frameworks (NIST AI RMF), and KRIs.
• Excellent written and verbal communication skills, translating complex risk concepts into decision-ready materials for technical and non-technical stakeholders.
• Proven ability to drive adoption of risk processes and influence outcomes across business units.
• Understanding legal and regulatory considerations related to cybersecurity, data privacy, and AI in a global environment.
• Experience developing executive-ready dashboards/presentations using PowerPoint, Power BI or Tableau, and GRC platforms; familiarity with Teams/Slack/Trello.
• Practical experience using AI/LLM tools to accelerate risk analysis, reporting, and content development.
• Bachelor’s degree required; advanced degree or certifications (CRISC/CISA/CISM/CRM) a plus.
• Ability to work across time zones; occasional travel.
• Strong analytical and problem-solving skills.
• Fluent English and high integrity.

Responsibilities

• Support the continued evolution of BCG’s ERM program with primary responsibility for IT Services & Cyber Risk and Data & AI Risk.
• Build partnerships with stakeholders across IT Services & Cyber Risk and Data & AI Risk domains; provide risk support and guidance.
• Drive a coordinated enterprise-wide approach to digital risk management with ERM workstreams.
• Develop executive-ready presentations, dashboards, and reports to communicate risk insights and recommendations.
• Monitor and analyze enterprise risk information to identify emerging IT services, cyber, data, and AI risks and support mitigation planning.
• Develop and maintain KRIs, risk sensing metrics, and executive reporting for technology and data risks.
• Escalate material IT Services & Cyber Risk and Data & AI Risk issues through governance and escalation framework.
• Coordinate periodic enterprise risk register reviews for IT Services & Cyber Risk and Data & AI Risk domains.
• Enable consistent risk reporting, governance, and communications across functions.
• Lead cross-functional projects to advance strategic risk initiatives and improve ERM processes.
• Contribute to enhancement of ERM methodologies, reporting frameworks, and governance practices.

Skills

Enterprise risk management

Technology risk

Cyber risk

IT services risk

GRC frameworks

NIST CSF

ISO 27001

AI risk frameworks

KRIs

Executive communication

Cross-functional collaboration

Risk reporting

Education

Bachelor’s degree in business/related field

CRISC/CISA/CISM/CRM certification (plus)

Tools

PowerPoint

Power BI

Tableau

GRC platforms

Microsoft Teams

Slack

Trello

Job description

Locations: London | Lisbon

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation‑inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom‑line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading‑edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You’ll Do

As the Global Digital Enterprise Risk Manager, you will help strengthen BCG’s Enterprise Risk Management (ERM) program with a primary focus on IT Services & Cyber Risk and Data & AI Risk. Working across global teams, you will help ensure the firm’s risk management approach remains forward‑looking by strengthening capabilities to proactively identify, assess, monitor, and respond to emerging risks across the rapidly evolving digital landscape. You will translate complex technology, IT Services, cyber, data, and AI risks into clear, actionable insights while supporting consistent, transparent enterprise risk management practices across the firm.

In this role, you will partner with colleagues across Digital, Information Technology, Information Security, Privacy, Legal, Compliance, and other business functions to drive cross‑functional risk initiatives. You will translate complex risk information into clear, executive‑ready insights, enabling informed decision‑making, and helping foster a strong risk‑aware culture across BCG.

• Support the continued evolution of BCG’s Enterprise Risk Management program, with primary responsibility for IT Services & Cyber Risk and Data & AI Risk.
• Build strong partnerships with stakeholders across IT Services & Cyber Risk and Data & AI Risk domains, delivering responsive, high‑quality risk support and guidance while balancing pace, rigor, and business need.
• Partner with ERM workstreams and cross‑functional stakeholders to drive a coordinated, enterprise‑wide approach to digital risk management.
• Develop executive‑ready presentations, dashboards, and reports that communicate key risk insights, trends, and recommendations.
• Monitor and analyze enterprise risk information to proactively identify emerging IT services, cyber, data, and AI risks, assess potential business impacts, and support mitigation planning.
• Develop and maintain key risk indicators (KRIs), risk sensing metrics, and executive reporting that support the proactive identification, monitoring, and communication of emerging technology, IT Services, Cyber, Data, and AI risks across the enterprise.
• Escalate material IT Services & Cyber Risk and Data & AI Risk issues through BCG’s enterprise risk governance and escalation framework, ensuring timely executive visibility, effective decision‑making, and appropriate risk oversight.
• Coordinate periodic enterprise risk register reviews for the IT Services & Cyber Risk and Data & AI Risk domains, ensuring risks are appropriately assessed, documented, and integrated into the broader Enterprise Risk Management risk register, reporting, and governance processes.
• Enable consistent risk reporting, governance, and communications across functions, promoting transparency and informed decision‑making.
• Lead cross‑functional projects and influence stakeholders to advance strategic risk initiatives and improve enterprise risk processes.
• Contribute to the ongoing enhancement of ERM methodologies, reporting frameworks, and governance practices to support a scalable and effective risk management program.

What You’ll Bring

• 7+ years of experience in enterprise risk management, technology risk, cyber risk, IT services risk, or related discipline.
• Experience assessing and managing IT services, cyber, data, and AI‑related risks within complex, global organizations.
• Knowledge of enterprise risk management frameworks (COSO ERM, ISO 31000), security frameworks (NIST CSF, ISO 27001), AI risk frameworks (NIST AI RMF), and key risk indicators (KRIs).
• Excellent written and verbal communication skills, with the ability totranslate complex, technical risk concepts into decision‑ready materials for both technical and non‑technical senior stakeholders.
• Proven ability to drive adoption of risk processes and influence outcomes across business units without direct authority, building credibility, trust, and buy‑in through collaboration, sound judgment, and effective stakeholder engagement.
• Solid understanding of legal and regulatory considerations related to cybersecurity, data privacy and AI in a global business environment.
• Experience developing executive‑ready presentations, dashboards, and reporting using PowerPoint, Power BI or Tableau, and governance, risk, and compliance (GRC) platforms. Experience with collaboration tools such as Microsoft Teams, Slack, or Trello is preferred.
• Practical experience using AI and large language model (LLM) tools to accelerate risk analysis, reporting, and content development.
• Bachelor’s degree in business, risk management, economics, computer science, information systems, cybersecurity, or related field. An advanced degree or professional certification, such as CRISC, CISA, CISM, or CRM, is a plus.
• Ability to work across time zones; occasional travel may be required.
• Strong analytical and problem‑solving skills.
• Fluent English and high professional integrity.

Success in this role requires strong business judgment, intellectual curiosity, and a collaborative mindset. You are comfortable navigating ambiguity, adapting to evolving priorities, and balancing multiple initiatives in a dynamic global environment. You build trusted relationships across senior stakeholders, cross‑functional partners, and teams, communicate complex risk topics with clarity and diplomacy, and translate evolving non‑financial risks into practical business insights that enable informed decision‑making.

Who You’ll Work With

You will be part of BCG’s Enterprise Risk Management team, partnering with colleagues across the firm to strengthen enterprise‑wide risk management capabilities and support informed decision‑making.

In this role, you will work closely with the Head of Enterprise Risk Management, Chief Risk Officer (CRO), Chief Information Officer (CIO), Chief Information Security Officer (CISO), and teams across Digital, Data Governance & AI.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E - Verify Employer.