Boston Consulting Group Looking for TDA/Platinion Manager, Cybersecurity and Data Privacy at San Francisco, California Full Time

Who We Are
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace a transformational approach aimed at benefiting all stakeholders—empowering organizations to grow, build sustainable competitive advantage, and drive positive societal impact.
Our diverse, global teams bring deep industry and functional expertise and a range of perspectives that question the status quo and spark change. BCG delivers solutions through leading-edge management consulting, technology and design, and corporate and digital ventures. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, fueled by the goal of helping our clients thrive and enabling them to make the world a better place.

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we work closely with clients to embrace a transformational approach aimed at benefiting all stakeholders—empowering organizations to grow, build sustainable competitive advantage, and drive positive societal impact.

Our diverse, global teams bring deep industry and functional expertise and a range of perspectives that question the status quo and spark change. BCG delivers solutions through leading-edge management consulting, technology and design, and corporate and digital ventures. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, fueled by the goal of helping our clients thrive and enabling them to make the world a better place.

Practice Area Profile

BCG’s Tech and Digital Advantage (TDA) practice focuses on helping clients deliver competitive advantage and business superior performance through the use of data, technology and digital. TDA is the fastest growing practice at BCG and at the heart of the strategic impact we have with our clients. Our consultants and experts globally work across all industries and provide deep experience and expertise across a number of topics including Digital Transformation, Data & Digital Platforms, AI at Scale, Agile, Cybersecurity and Digitizing the Tech Function.

At BCG, we bring together the right people to conquer complexity, drive material change, and initiate positive, long-term impact. Explore our BCG Culture and Values for more information.

What You’ll Do

What You’ll Do: 

As a Cybersecurity Consultant at BCG TDA/Platinion, you will work with BCG clients to protect organizations’ most valuable digital, intellectual, and human assets against malicious attacks and fatal errors. In this role, you will apply your sound technical expertise, understanding of business contexts, and analytical skills to enable organizations security priorities. You will also work in multidisciplinary teams to help businesses improve their products and create market growth strategies. 

 

Cybersecurity Consultants at BCG TDA/Platinion are: 

• Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions.  
• Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. 
• Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. 
• Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams. 

You’re Good At: 

• Developing tailored, customized cyber and data privacy solutions to address our clients challenges

• Implementing cybersecurity and privacy program transformation and culture change initiatives

• Conducting cybersecurity and privacy assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security

• Developing cybersecurity and data privacy strategies, policies, processes, and procedures to protect clients’ internal infrastructure and their customers

• Understanding and applying digital, IT, cloud computing, and data strategy best practices to enhance cybersecurity and data privacy

• Developing cybersecurity and privacy business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits

• Working with leadership teams, including facilitating board and senior management cybersecurity and privacy awareness workshops

• Integrating security and privacy by design into software, systems, and architectures through shifting left and designing appropriate processes, procedures, methods, and techniques

• Quantifying progress through cybersecurity and privacy measurement and risk quantification

• Helping clients with incident response readiness, by creating and facilitating table-top exercises, business continuity and disaster recovery plans

What You’ll Bring (Experience & Qualifications)
You Bring:

• 6+ years of practical experience in cybersecurity and data privacy consulting or project management (with teams of five persons or more) in a financial, healthcare, telecommunications, industrial or government organization
• BS in mathematics, natural sciences, information technology, business management, or similar degree
• CISSP, CIPP/E, CIPP/US or equivalent
• 2+ years of experience managing projects and decision processes at large organizations
• Hands-on experience with, or extensive knowledge of some of the following:

• Developing cybersecurity and privacy policies or strategies
• Managing cybersecurity and privacy risk
• Leading security and privacy assessments
• Implementing and running cybersecurity and privacy programs
• Developing security and privacy by design architectures
• Integrating security and privacy into system development lifecycle
• Cyber supply chain risk management/third party risk management
• Identity and access management
• Developing cybersecurity and privacy workforce
• Delivering cybersecurity and privacy awareness training
• Continuous monitoring
• Vulnerability management, including conducting vulnerability assessments
• Using SIEM tools, penetration testing, incident management, BCP, and/or DRP
• Ability to navigate and advise on complex, evolving privacy regulatory landscape, especially new laws
• Working on data privacy projects that span across requirements engineering, design, technical implementation, and/or technical program management is required

• Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle
• Working knowledge of at least three different cybersecurity frameworks:
• NIST Cybersecurity Framework
• NIST Privacy Framework
• ISO/IEC 27000 family of standards, etc.
• C2M2
• NIST SP 800-53 and companion publications
• Cloud Security Alliance CCM
• The CRI Profile
• Experience securing and protect data privacy for Cloud, Big Data, and Mobile environments
• Knowledge and experience with major digital risk and technology regulatory environments
• Business and technical fluency in major data protection laws (e.g., GDPR, CCPA, CPRA)
• Mentorship, leading and offering guidance to other members of the team to develop talent, provide direction, and oversee output and projects
• Management experience, leading team members through our career development process and providing timely and accurate performance feedback
• Ability to write proposals and reports
• Ability to develop client presentations
• Ability to present to senior management groups for both training and reporting purposes
• Business-fluent written and spoken English language skills
• Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects

What We Offer: 

At BCG, we care about our people, and offer best in class benefits to support you personally and professionally throughout your different life experiences including: 

• An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications.  
• A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment.  

BCG pioneered strategy consulting more than 50 years ago, and we continue to innovate and redefine the industry. We offer multiple career paths for the world’s best talent to have a real impact on business and society. As part of our team, you will benefit from the breadth and diversity of what we are doing today and where we are headed next. We count on your authenticity, exceptional work, and strong integrity. In return we are committed to supporting you in discovering the most fulfilling career journey possible—and unlocking your potential to advance the world.

VACCINE: 
Candidates should be aware that BCG currently maintains a policy requiring all US & Canada based employees to be fully vaccinated against COVID-19. Newly hired employees must be fully vaccinated prior to their employment start date. BCG is an equal opportunity employer and will provide a reasonable accommodation to those unable to be vaccinated for medical or religious reasons where it is not an undue hardship to the company to do so as provided under applicable federal, state, provincial and local law.
FOR U.S. APPLICANTS:
Boston Consulting Company (“BCG”) is an Equal Opportunity/Affirmative Action employer. All qualified applicants will be considered for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by applicable law.

The first year base compensation for this role is $160,000 in USD.

In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG’s Profit Sharing and Retirement Fund (PSRF) contribution. BCG also provides a market leading benefits package described below.

At BCG, we are committed to offering a comprehensive benefit program that includes everything our employees and their families need to be well and live life to the fullest. We pay the full cost of medical, dental, and vision coverage for employees – and their eligible family members.* That’s zero dollars in premiums taken from employee paychecks. All our plans provide best in class coverage:

• Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children
• Low $5 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs
• Dental coverage, including up to $5,000 (USD) in orthodontia benefits
• Vision insurance with coverage for both glasses and contact lenses annually
• Reimbursement for gym memberships and other fitness activities
• Fully vested retirement contributions made annually, whether you contribute or not
• Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years
• Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement

*Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage.

To learn more about our employee benefit please check our Benefits page.