Global Zero-Trust Security Architecture Director

Boston Consulting Group (BCG); Lisboa; On-site; EUR 110,000 - 150,000; Full time

Job summary

Boston Consulting Group (BCG) seeks an Infrastructure Security Architecture Lead to own architecture, standards, and Zero Trust direction for global infrastructure. You will line‑manage a team of architects across identity, network, device, and data pillars and ensure coherence, quality, and maturity of security architecture.

You will collaborate with engineering, cloud, identity, and security teams to uphold enterprise security controls.

Qualifications

• Bachelor’s degree or equivalent practical experience in a relevant field.
• 10+ years in security architecture, security engineering, or infrastructure security.
• Experience managing or leading a technical team.
• Experience in audit‑sensitive or regulated enterprises with governance processes.
• Strong understanding of Zero Trust (NIST SP 800‑207) and hybrid cloud environments.

Responsibilities

• Own security architecture strategy, reference architectures, and target-state roadmaps across identity, network, device, and data pillars.
• Line-manage and grow the Architects team; set objectives and performance
• Ensure architectural coherence across pillars and mentor for complex design decisions
• Represent ISRM governance in enterprise forums and drive risk-based prioritization
• Leverage AI-assisted tooling for standards development with human oversight

Skills

Security architecture

People management

Stakeholder influence

Zero Trust

AI-assisted security tooling

Education

Bachelor’s degree in a relevant field or equivalent practical experience

Tools

Azure

AWS

GCP

Job description

Boston Consulting Group (BCG) seeks an Infrastructure Security Architecture Lead to own architecture, standards, and Zero Trust direction for global infrastructure. You will line‑manage a team of architects across identity, network, device, and data pillars and ensure coherence, quality, and maturity of security architecture.

You will collaborate with engineering, cloud, identity, and security teams to uphold enterprise security controls.