WHAT YOU'LL DO
The Global Security Senior Manager – Security Architect provides internal BCG technical consulting expertise and thought leadership in information security architecture and security design measures for new projects, ventures, and systems, for solutions across hybrid on-premises, multi-cloud, and SaaS ecosystems, influencing engineering decisions and outcomes that drive consulting team productivity and business success. The Security Architect ensures the digital applications, tools, and services protect our data, our clients’ data, and our intellectual property; are resilient to cyber-attack; meet BCG policy and standards, regulatory requirements, and industry best practices, while using a risk-based approach to meeting BCG business needs and objectives.

The Global Security Senior Manager – Security Architect works with teams inside BCG to secure enterprise information by determining security requirements; planning, implementing, and testing secure systems; participating in IT projects as the IT Security Subject Matter Expert; preparing security standards, policies, and procedures; and mentoring team members.
 

YOU'RE GOOD AT

The Global Security Senior Manager – Security Architect is good at:

• Determining security requirements by evaluating business strategies and requirements, implementing information security standards, conducting system and vulnerability analyses and risk assessments, recommending secure architecture aligned to business architecture, identifying and driving remediation of integration issues and productivity improvements.
• Creating, maintaining, and driving information security technology strategy and roadmap.
• Researching and analyzing emerging technologies, designing and advocating new technologies, architectures, and security products in collaboration with system and service owners.
• Providing expert knowledge of solution and application architecture as well as methodologies in the software development life cycle.
• Managing end to end delivery of projects with hands on involvement in the development and configuration of products.
• Maintaining security by ensuring compliance to standards, policies, regulatory requirements, and good industry practices.
• Self-managing progress and status of tasks and deliverables on projects and escalating issues and risks timely.
• Interacting with stakeholders and possessing the ability to influence direction, articulate risks, and sell secure solutions and roadmaps.
• Completing market assessments on vendor products, packages, and services; guiding tests and implementation of products solving enterprise information security requirements and consulting team productivity.
• Suggesting and implementing alternative mitigations and compensating controls to allow for business to continue while protecting BCG's assets.
• Guiding the configuration, implementation, monitoring, and support for software and systems that will help ensure compliance with regulatory, industry, and corporate policies and procedures while enabling consulting team productivity.
• Subject Matter Expert and security domain participant for overall enterprise architecture and other technologists.
• Updating job knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.

YOU BRING (EXPERIENCE & QUALIFICATIONS)

• Bachelor’s degree (or equivalent);
• Minimum of 6 years of experience in architecture, design and deployment of industry leading solutions; preferably with hands on experience with implementation in hybrid, multi-cloud, and SaaS environments.
• Subject matter expert in security practices that include the administration of control systems, vulnerability identification and mitigation, best practices for securing and hardening, and risk analysis.
• Experience in virtualization and cloud security.
• Evidence of user experience and productivity considerations in solutions development