BCG Platinion | Manager, Cybersecurity

Boston Consulting Group (BCG); New York (NY); On-site; USD 171,000 - 209,000; Full time

Benefits offered by this job

Zero-cost medical coverage

Retirement Fund contributions

Annual performance bonus

Job summary

Boston Consulting Group (BCG) is seeking a cybersecurity consultant with over 6 years of experience to drive innovative solutions for clients. This role demands strong technical skills in cybersecurity and effective communication for translating complex concepts into actionable strategies.

The ideal candidate will possess a BS in cybersecurity or a related field and have significant experience in risk management, rule development, and assessing cybersecurity frameworks. The position offers a competitive salary, extensive benefits, and opportunities for global travel.

Qualifications

• 6+ years of experience in cybersecurity consulting.
• Hands-on experience with cybersecurity strategies or policies.
• Broad knowledge of cybersecurity technologies.

Responsibilities

• Conduct cybersecurity assessments and gap analyses.
• Develop cybersecurity strategies and policies.
• Facilitate awareness workshops for senior management.

Skills

Cybersecurity consulting

Technical communication

Risk management

Team management

Data protection

Education

BS in cybersecurity or related field

Tools

SIEM tools

GenAI tools

Job description

Locations: Atlanta | Austin | Boston | Brooklyn | Chicago | Dallas | Denver | Detroit | Durham | Houston | Los Angeles | Miami | Minneapolis | Nashville | New York | Philadelphia | Pittsburgh | Summit | Washington

Who We Are

Boston Consulting Group (BCG) is a global consulting firm that partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. Our success depends on a spirit of deep collaboration and a global community of diverse individuals determined to make the world and each other better every day.

About BCG Platinion

BCG Platinion’s presence spans across the globe, with offices in Asia, Europe, and South and North America. We achieve digital excellence for clients with sustained solutions to the most complex and time‑sensitive challenge. We guide clients into the future to push the status quo, overcome tech limitations, and enable our clients to go further in their digital journeys than what has ever been possible in the past. At BCG Platinion, we deliver business value through the innovative use of technology at a rapid pace. We roll up our sleeves to transform business, revolutionise approaches, satisfy customers, and change the game through Architecture, Cybersecurity, Digital Transformation, Enterprise Application and Risk functions. We balance vision with a pragmatic path to change, transforming strategies into leading‑edge tech platforms, at scale.

What You’ll Do

• Technical experts: critical thinkers and extensive cybersecurity expertise that drives innovative solutions.
• Innovators: leverage cutting‑edge cybersecurity approaches and tactics to create customised solutions for clients.
• Change agents: make change happen across an organisation, aligning and onboarding teams to implement new cybersecurity processes and toolsets, and optimise their practices.
• Collaborative: interdisciplinary team players who seek alignment and establish relationships ranging from cross‑functional stakeholder groups to existing security teams.

You’re Good At

• Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship.
• Analyzing cybersecurity standards, regulatory requirements, and best practices and translating them into meaningful recommendations tailored to a client’s unique environment.
• Communicating complex and technical concepts in concise, business‑value‑centric written form.
• Implementing cybersecurity transformation and culture‑change initiatives.
• Conducting cybersecurity assessments, including gap analysis and roadmap development in multiple contexts.
• Developing cybersecurity strategies, policies, processes, and procedures to protect clients’ internal infrastructure and their customers.
• Understanding data protection, data security, and privacy drivers that influence organisations today.
• Developing cybersecurity business strategies for technology product vendors integrated into the overall business strategy and increasing revenue and profits.
• Facilitating board and senior‑management cybersecurity awareness workshops.
• Embedding product security and DevSecOps practices into software development lifecycles, system designs, and IT architectures.
• Utilising cyber risk quantification to reduce uncertainty and improve executive decision‑making.
• Creating and facilitating table‑top exercises.
• Delivering operational resilience through incident response, business continuity, and disaster recovery planning.

What You’ll Bring

• 6+ years of practical experience in cybersecurity consulting or management (with teams of five or more) in a variety of sectors and contexts.
• BS in cybersecurity, information systems, mathematics, natural sciences, business management, or a related degree.
• Hands‑on experience with or extensive knowledge of:
• Developing cybersecurity strategies or policies.
• Quantifying and managing cybersecurity risk.
• Leading security assessments.
• Designing, transforming, implementing, and running cybersecurity programmes.
• Developing security architectures.
• Integrating security into applications and systems.
• Implementing cloud security.
• Managing third‑party and supply‑chain cybersecurity risk.
• Designing / implementing identity and access management.
• Developing and upskilling a cybersecurity workforce.
• Delivering cybersecurity culture change, awareness, and training.
• Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc.
• Designing / implementing vulnerability management, including conducting vulnerability assessments.
• Performing penetration testing, incident management, BCP, and/or DRP.
• Broad knowledge of cybersecurity technologies throughout the organisational and acquisition lifecycle.
• Working knowledge of at least two cybersecurity frameworks:
• NIST Cybersecurity Framework.
• C2M2.
• NIST SP 800‑53 and companion publications.
• ISO/IEC 27000 family of standards, etc.
• Cloud Security Alliance CCM.
• Team‑oriented attitude.
• Strong communication and presentation skills.
• Outstanding analytical and conceptual skills.
• Results‑oriented mindset.
• Confidence and persuasiveness.
• GenAI tool fluency (e.g., demonstrated use of ChatGPT, Claude) and validation of responses.
• Business‑fluent written and spoken English.
• Willingness to travel globally for client work and BCG teams; this role may involve significant travel.

What We Offer

• Opportunity to work organically across disciplines and across BCG, combining strategic thinking with hands‑on applications.
• Unique experience to work alongside passionate problem‑solvers focused on delivering innovative and valuable digital solutions in a supportive environment.

For U.S. Applicants

Base compensation: $190,000 USD. Eligible for an annual discretionary performance bonus and BCG’s Profit Sharing and Retirement Fund (PSRF) contribution. BCG provides a market‑leading benefits package, including zero‑cost medical, dental, and vision coverage for employees, spouses, and children, and many other benefits listed in detail.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity or expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable. Applicants with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E‑Verify Employer. For more information on E‑Verify, contact HR.