Data Protection Architect — Cybersecurity & Compliance Lead

The Boston Consulting Group GmbH; Washington (District of Columbia); On-site; USD 154,000 - 188,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Parental leave

Job summary

Boston Consulting Group is seeking a data protection engineer for the BCG Federal Organization to operate and maintain the Data Protection architecture across GCC High platforms including AWS, MS Azure and M365 in alignment with NIST 800-171, DFARS 7012, CMMC Level 2 and IT Security best practices.

You will collaborate with engineering and IT service teams to lead effective data protection process improvements, refine labeling strategies, and present data-driven recommendations to senior

Qualifications

• 5+ years of experience in Information Security and Data Protection.
• Experience with data handling within AI tooling and management.
• Familiarity with FedRAMP, NIST 800-171, CMMC, or related frameworks.

Responsibilities

• Operate and maintain Data Protection architecture across GCC High platforms (AWS, Azure, M365).
• Translate compliance obligations into operational data schemas and labeling strategies.
• Collaborate with Engineering, IT Service, Risk and Security teams to implement process improvements.
• Present data analysis and recommendations to senior stakeholders.
• Lead data-driven egress monitoring and controls evolutions.
• Architect new data controls within emerging AI architectures.

Skills

Data protection strategy

Cross-functional collaboration

Data classification

AI tooling data handling

Security governance

Information security leadership

Security incident response

Data loss prevention (DLP)

Education

Bachelor's in Computer Science or Information Security

CISM/CISSP or related certification

Tools

Azure

M365

Purview

Defender

Zcaler

Job description

Boston Consulting Group is seeking a data protection engineer for the BCG Federal Organization to operate and maintain the Data Protection architecture across GCC High platforms including AWS, MS Azure and M365 in alignment with NIST 800-171, DFARS 7012, CMMC Level 2 and IT Security best practices.

You will collaborate with engineering and IT service teams to lead effective data protection process improvements, refine labeling strategies, and present data-driven recommendations to senior