Global Cybersecurity Senior Manager - Data Protection Engineer

Cybersecurity Jobs; Boston (MA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision coverage

Gym membership reimbursement

Profit Sharing Retirement Fund

401(k) plan

Parental leave

Paid time off

Sick time

Job summary

BCG Federal is seeking a Data Protection Engineer to operate and maintain data protection architecture across GCC High platforms aligned to NIST 800-171, DFARS 7012, and CMMC Level 2. The role supports secure SaaS solutions for clients and requires collaboration with Engineering, IT Service, Risk, and Security teams.

The ideal candidate has strong experience in information security, data protection, DLP, and sensitivity labeling, with familiarity in Azure, Purview, Defender, and Zscaler.

Qualifications

• 5-8+ years of experience in Information Security and Data Protection.
• 3-5+ years of Data Protection technical operational capabilities and strategies.
• Experience with data handling in AI tooling and management.
• Proficiency in data classification and tracking strategies.
• Familiarity with FedRAMP, NIST 800-171, and CMMC.
• Encryption and Data Loss Prevention (DLP) experience using sensitivity labeling.

Responsibilities

• Enhance and maintain the Data Classification and labeling technical strategy based on business, client, and compliance requirements.
• Translate compliance and client contractual obligations into an operational data schema.
• Collaborate with Engineering and IT Service teams to drive process improvements and effective execution.
• Work with Risk and Security teams to define a restrictive labeling strategy.
• Refine data protection policies to align with security needs.
• Present data analysis and recommendations to senior stakeholders.
• Lead data-driven egress monitoring and evolve related controls.
• Architect new data controls and strategy within emerging AI architecture.
• Evolve security tools and reporting with embedded AI security tooling.
• Collaborate with vendor technical teams to enable progress.
• Use newer technologies to automate containment and isolation while improving user behaviors.
• Conduct technical research to address new challenges.

Skills

Information Security

Data Protection

AI tooling data handling

Data classification

Security risk assessment

Compliance awareness

Communication skills

Tools

AWS

MS Azure

M365

Purview

Defender

Zscaler

Job description

BCG Federal is looking for a Data Protection Engineer to help operate and maintain data protection architecture across multiple GCC High platforms, aligned to NIST 800-171, DFARS 7012, CMMC Level 2, and security best practices. This role supports a fast-paced, product-oriented environment where security guidance helps build, implement, and protect secure SaaS solutions for clients.

Benefits that support your life outside work

• $0 health insurance premiums for BCG employees, spouses, and children
• $10 copays for trips to the doctor, urgent care visits, and prescriptions for generic drugs
• Dental coverage, including up to $5,000 in orthodontia benefits
• Vision insurance covering glasses and contact lenses annually
• Reimbursement for gym memberships and other fitness activities
• Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option to contribute to a 401(k) plan
• Paid Parental Leave and family benefits including elective egg freezing, surrogacy, and adoption reimbursement
• Generous paid time off: 12 holidays per year, annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month)
• Paid sick time on an as needed basis

What you will do

• Enhance and maintain the Data Classification and labeling technical strategy based on business, client, and compliance requirements
• Translate compliance and client contractual obligations into an operational data schema
• Collaborate with Engineering and IT Service teams to drive process improvements and effective execution
• Work with Risk and Security teams to define a restrictive labeling strategy
• Refine data protection policies to align with security needs
• Present data analysis and recommendations to senior stakeholders
• Lead data-driven egress monitoring and evolve related controls
• Architect new data controls and strategy within emerging AI architecture
• Evolve security tools and reporting with embedded AI security tooling
• Collaborate with vendor technical teams to enable progress
• Use newer technologies to automate containment and isolation while improving user behaviors
• Conduct technical research to address new challenges

What you bring

• 5-8+ years of experience in Information Security and Data Protection
• 3-5+ years of Data Protection technical operational capabilities and strategies
• Experience with data handling in AI tooling and management
• Proficiency in data classification and tracking strategies
• Familiarity with relevant standards and frameworks, including Fedramp, NIST 800-171, and CMMC
• Encryption and Data Loss Prevention (DLP) experience using sensitivity labeling
• Excellent data analysis skills and presentation skills
• Ability to anticipate risks and identify mitigation strategies
• Knowledge of security issues, trends, and best practices
• Experience with Microsoft Azure, M365, Purview, Defender, and Zscaler within a GCC High environment
• Ability to obtain and maintain a Security Clearance (if required)

Tools and standards you will work with

AWS, MS Azure, M365, Purview, Defender, Zscaler, sensitivity labeling, DLP, and compliance alignment with NIST 800-171, DFARS 7012, CMMC Level 2, and Fedramp.

Location and work model

• Boston, MA (onsite)
• Washington

You will help application developers, engineering, and cloud infrastructure teams by providing security expertise and guidance, supporting an enthusiastic and motivated group of security professionals delivering secure SaaS solutions to clients.