Global Cybersecurity Senior Manager - Data Protection Engineer

Boston Consulting Group (BCG); Washington (District of Columbia); On-site; USD 154,000 - 188,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

Vision insurance

Paid Parental Leave

15 vacation days per year

13 holidays per year

Job summary

Boston Consulting Group (BCG) Federal Organization seeks a Data Protection Engineer to operate and maintain Data Protection across GCC High platforms including AWS, Azure, and M365, aligning with NIST 800-171, DFARS 7012, and CMMC Level 2.

You will collaborate with Engineering and IT Service teams to implement data controls, labeling, and AI-driven security tools, presenting findings to senior stakeholders and driving improvements.

Qualifications

• 5-8+ years in Information Security and Data Protection.
• 3-5+ years Data Protection operational capabilities and strategies.
• Experience with data handling in AI tooling and management.
• Proficiency in data classification and tracking strategies.
• Familiar with Fedramp, NIST 800-171, CMMC, etc.

Responsibilities

• Enhance and maintain data classification and labeling strategy.
• Translate compliance obligations into an operational data schema.
• Lead process improvements with Eng and IT Service teams.
• Define restrictive labeling strategy with Risk and Security.
• Refine Data Protection processes to meet security needs.
• Present data analysis and recommendations to executives.
• Lead data-driven egress monitoring and control evolutions.
• Architect new data controls within emerging AI architecture.
• Evolve security tools and reporting with embedded AI tools.
• Collaborate with vendor technical teams to enable progress.
• Automate containment and drive better user behaviors.
• Perform Technical research on new challenges.

Skills

Information Security

Data Protection

Security operations

Vendor coordination

Presentation to stakeholders

Analytical mindset

Independent worker

Urgency in tasks

Tools

Azure

M365

Purview

Defender

Zscaler

Job description

Locations

Washington | Boston

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

The BCG Federal Organization is seeking a knowledgeable and talented Data Protection Engineer that will be responsible for operating and maintaining the Data Protection architecture across multiple GCC High platforms including AWS, MS Azure and M365 in alignment with NIST 800-171, DFARS 7012, CMMC Level 2 and IT Security best practices.

Your Duties Will Include

• Enhance and maintain the Data Classification and labeling technical strategy in alignment with business, client and compliance requirements
• Translate compliance and client contractual obligations into an operational data schema.
• Collaborate with Engineering and IT Service teams to lead effective process improvements
• Collaborate with Risk and Security teams to define restrictive labeling strategy
• Refine Data Protection processes policies to align with security needs
• Present data analysis and recommendations to senior stakeholders
• Lead data driven egress monitoring and controls evolutions
• Architect new data controls and strategy within emerging AI architecture
• Evolve security tools and reporting with embedded AI Security tools
• Collaborate with vendor technical teams to enable progress
• Use newer technologies to automate containment, isolation and drive better user behaviors
• Perform Technical research on new challenges

You're Good At

• Data Protection Technical strategy and leading teams toward implementation across multiple platforms.
• Investigating new technologies and solutions and presenting effective actionable recommendations to business stakeholders.
• Comprehensive problem-solving skills to identify and solve issues quickly.
• Ability to work well independently as well as part of a virtual, geographically dispersed team bringing a sense of urgency to the tasks at hand.
• Effectively handle difficult and stressful situations with poise, tact and patience, while demonstrating a sense of urgency.
• Strong analytical skills, detail-oriented, and quality-minded.
• Exceptional verbal and written communication and presentation skills.
• Manage alert triage staff and process.
• Daily driving delivery of meaningful process improvement.

What You'll Bring

• 5-8+ years of experience in Information Security and Data Protection
• 3-5+ years of Data Protection technical operational capabilities and strategies
• Experience with data handling within AI tooling and management
• Be proficient in data classification and tracking strategies.
• Be familiar with relevant industry standards and frameworks (i.e. Fedramp, NIST 800-171, CMMC, etc)
• Encryption and Data Loss Prevention (DLP) experience using sensitivity labeling
• Excellent data analysis skills and presentation skills
• Ability to foresee and identify mitigation strategies for risks
• Knowledge of security issues, trends and best practices
• Experience with Microsoft Azure, M365, Purview, Defender, Zcaler within a GCC High environment
• Ability to obtain and maintain a Security Clearance (if required)

Who You'll Work With

You will work in a fast-paced, intellectually challenging, product oriented environment to help build, implement, and protect a secure SaaS product environment. You will work with application developers, engineering, and cloud infrastructure teams to provide security expertise and guidance. You will be a part of an enthusiastic and motivated team of security professionals in support of delivering SaaS solutions to our clients.

Additional info

*** For US locations only ***

In the US, we have a compensation transparency approach.

Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below.

The base salary range for this role begins at $154, 000 in our lowest cost US region and goes up to $188, 000 in our highest cost US region. Your recruiting contact can share more about the specific salary range for your preferred location during the hiring process.

This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness.

In addition to your base salary, your total compensation will include a bonus of up to 20% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years.

All Of Our Plans Provide Best In Class Coverage

• Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children
• Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs
• Dental coverage, including up to $5,000 in orthodontia benefits
• Vision insurance with coverage for both glasses and contact lenses annually
• Reimbursement for gym memberships and other fitness activities
• Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan
• Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement
• Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (