Executive Federal Cyber Risk & Compliance Director

Boston Consulting Group (BCG); Boston (MA); On-site; USD 176,000 - 200,000; Full time

Benefits offered by this job

Zero-dollar health premiums

Dental coverage

Vision insurance

Retirement contribution

Paid time off

Parental leave

Gym reimbursement

401(k) option

Job summary

Boston Consulting Group is seeking a Director of Federal Security Governance, Risk & Compliance (SGRC) to lead the strategy and governance for federal cybersecurity, governance, and AI risk across BCG Federal offerings. You will translate complex regulatory requirements into practical controls, drive audit readiness, and partner with Security Architecture to align policies with engineering.

This role requires executive communication, change management, and the ability to obtain necessary U.S.

Qualifications

• 10+ years in cybersecurity, information security, GRC, audit or risk management.
• Experience leading federal cybersecurity compliance programs (CMMC, NIST 800-171/53, FedRAMP).
• AI security governance experience with GenAI risk management.
• Strong collaboration with Security Architecture and dev/IT teams.
• Executive-level communication and reporting skills.
• Organizational change management in security programs.
• Ability to obtain and maintain U.S. Government Secret Clearance.

Responsibilities

• Lead the Federal GRC pillar strategy, roadmap, and governance cadence across BCG Federal.
• Direct enterprise compliance initiatives for DFARS, CMMC 2, NIST 800-171/53, FedRAMP, and AI governance.
• Partner with Security Architecture to translate regulatory requirements into operating baselines.
• Own readiness for federal assessments, SSP development, evidence prep, and audit defense.
• Establish Federal AI Governance with risk methodologies and safe adoption pathways.
• Manage federal risk register governance, including identification, mitigation, and reporting.
• Lead security reviews of contracts, RFPs, and vendor risk management.

Job description

Boston Consulting Group is seeking a Director of Federal Security Governance, Risk & Compliance (SGRC) to lead the strategy and governance for federal cybersecurity, governance, and AI risk across BCG Federal offerings. You will translate complex regulatory requirements into practical controls, drive audit readiness, and partner with Security Architecture to align policies with engineering.

This role requires executive communication, change management, and the ability to obtain necessary U.S.