Who We Are Boston Consulting Group partners withleaders in business and society to tackle their most importantchallenges and capture their greatest opportunities. BCG was thepioneer in business strategy when it was founded in 1963. Today, wehelp clients with total transformation-inspiring complex change,enabling organizations to grow, building competitive advantage, anddriving bottom-line impact. To succeed, organizations must blenddigital and human capabilities. Our diverse, global teams bringdeep industry and functional expertise and a range of perspectivesto spark change. BCG delivers solutions through leading-edgemanagement consulting along with technology and design, corporateand digital ventures—and business purpose. We work in a uniquelycollaborative model across the firm and throughout all levels ofthe client organization, generating results that allow our clientsto thrive. What You'll Do The Global Risk Security Architect ExpertDirector is a strategic leader responsible for defining andimplementing BCG’s enterprise security architecture. This roleensures the protection of data, intellectual property, and clientassets by designing secure, scalable, and resilient systems thatalign with the firm's business goals and security standards. Thearchitect leads efforts to integrate security into every stage ofIT systems development, ensuring alignment with agile practices,emerging technologies, and zero-trust principles. By leveragingrobust governance and cross-functional collaboration, the architectensures secure innovation, operational resilience, and effectiverisk management.Key responsibilities include:SecurityArchitecture Leadership:* Define and enforce secure engineeringpractices and frameworks, including reusable referencearchitectures and secure-by-design standards * Develop and maintainsecurity blueprints aligned with Agile/DevSecOps methodologies *Ensure security is embedded in all IT projects, including securecode reviews, vulnerability testing, and automated CI/CD pipelineintegrationEmerging Technology Integration:* Drive the adoptionof advanced technologies, including zero-trust architectures,secure APIs, and cryptographic solutions * Leverage AI/ML,containerization, and cloud-native security practices to enhanceenterprise defensesContinuous Improvement:* Use insights fromincident analysis, threat intelligence, and testing outcomes torefine and enhance security architectures * Collaborate withoperational teams to integrate feedback loops that ensurecontinuous alignment with evolving threatsGovernance andCollaboration:* Partner with Security Operations, IncidentResponse, and Risk Management teams to ensure comprehensivesecurity integration * Facilitate enterprise-wide adherence toregulatory, industry, and internal standards, including ISO 27001and NISTYOU’RE GOOD ATStrategic Vision:Translating complexbusiness strategies into secure, scalable, and actionablearchitectures.Technical Expertise:Leveraging modern frameworksand technologies, including zero-trust, DevSecOps, andcryptography, to protect enterprise systems. *Collaboration:*Partnering effectively across geographies and functions to achievesecurity goals.Problem Solving:Driving innovative solutions foremerging threats and architectural challenges. *Mentorship:*Leading and inspiring teams while fostering an enterprise-wideculture of architectural excellence. What You'll Bring *Education:*Bachelor’s degree (or equivalent).Experience:* Minimum of 10years of progressive experience in information security, withstrong expertise in enterprise security architecture * Provenexperience in cloud security, zero-trust architecture, APIsecurity, and DevSecOps pipelines * Experience creating reusablesecurity reference architectures, integrating security intoAgile/DevSecOps methodologies, and driving consistency in securityframeworksTechnical Proficiency:* Hands-on experience designingsecure architectures for hybrid cloud environments * Deepunderstanding of zero-trust frameworks, secure-by-design standards,and agile methodologies * Familiarity with automation tools andsecure software development lifecycle (SDLC) practices Who You'llWork With You will collaborate within a fast-paced, intellectuallychallenging, and service-oriented environment. Working alongsideinternal IT, business leaders, and consultants, you will be anintegral part of BCG’s Information Security Risk Management team.By partnering with technical and operational teams globally, youwill drive the firm’s security strategies, enabling secureinnovation and digital transformation. Boston Consulting Group isan Equal Opportunity Employer. All qualified applicants willreceive consideration for employment without regard to race, color,age, religion, sex, sexual orientation, gender identity /expression, national origin, disability, protected veteran status,or any other characteristic protected under national, provincial,or local law, where applicable, and those with criminal historieswill be considered in a manner consistent with applicable state andlocal laws. BCG is an E - Verify Employer. (Click here)(https://careers.bcg.com/global/en/e-verify) for more informationon E-Verify.
