Information Security Senior Director – BCG Fed

Boston Consulting Group•Washington, DC

7h•$225,000 - $262,500•Hybrid

About The Position

The Information Security Senior Director serves as BCG Federal’s primary executive authority on enterprise cybersecurity strategy, risk governance, and federal compliance. The role reports regularly to the Government Security Committee (GSC) and executive leadership and has direct authority to define and approve the federal IT security boundary, manage enterprise risk, and escalate unresolved security exposures. It operates as an executive peer to business and technology leaders, balancing client mission enablement with federal defense compliance requirements. The role leads a dedicated cybersecurity organization and directs the strategic security interface between BCG Federal and BCG Global IT and Security. It oversees the security and compliance of a cloud environment centered on Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines, ensuring isolation and compliance with DCSA standards while using global shared capabilities where permitted. The posting describes the organization as approximately 25 professionals in the role overview and 15 professionals in the responsibilities section. The position is generally expected to be performed from a BCG office or in person with clients on a regular basis, typically around 50% of working time, depending on business needs and local policies. Locations are Washington and Boston.

Requirements

7–10+ years of IT security and information assurance experience.
2–4+ years of experience operating within the Defense Industrial Base (DIB) or a directly comparable national security environment.
7+ years of demonstrated success directly managing multidisciplinary IT teams, setting operational rhythms, and mentoring technical leads.
Strong architectural knowledge of Microsoft GCC-High and Azure Government, including Entra ID, Purview, Defender, and Intune.
Knowledge of foundational AWS DevOps and IAM security baselines.
In-depth understanding of NIST SP 800-171, DFARS 7012, CMMC Level 2, and DCSA oversight requirements.
Active Top Secret clearance.
Bachelor’s degree in a relevant technical or government/business discipline.

Nice To Haves

Recent coursework in AI and cybersecurity.

Responsibilities

Define enterprise security strategy and provide regular security and compliance briefings to the Government Security Committee (GSC).
Maintain risk governance aligned with federal missions and strategic corporate growth.
Direct the cybersecurity organization across security operations, compliance, cloud security architecture, identity and access management (IAM), and vulnerability management.
Partner with BCG Global CISO and IT leadership to maintain boundary isolation, data barriers, and access controls between BCG Federal enclaves and commercial global infrastructure.
Oversee cloud security architecture and boundary controls for Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines, protecting Controlled Unclassified Information (CUI) and export-controlled data.
Own enterprise compliance for NIST SP 800-171, NIST SP 800-53, DFARS 252.204-7012, and CMMC Level 2.
Lead System Security Plan (SSP) maintenance, SPRS scoring, and C3PAO and federal audit readiness.
Collaborate with Legal, the Facility Security Officer (FSO), and leadership to administer the Technology Control Plan (TCP) and ensure systems meet DCSA security requirements and governance obligations.
Partner with capture and client delivery teams to architect compliant, secure solutions for client enclaves and support proposal responses.
Oversee security and compliance review of AI tools, large language models, and emerging technologies in CUI-constrained environments.
Oversee vendor risk assessments, software supply chain security, and FedRAMP cloud service provider evaluations across subcontractors and external integrations.

Benefits

Annual discretionary performance bonus and Firm Performance Bonus eligibility for Senior Directors/Executive Directors.
Retirement contribution starting at 10%.
Zero-dollar health insurance premiums for employees, spouses, and children.
Low $10 copays for doctor visits, urgent care, and generic prescriptions.
Dental coverage, including up to $5,000 in orthodontia benefits.
Vision insurance covering glasses and contact lenses annually.
Reimbursement for gym memberships and other fitness activities.
Fully vested annual Profit Sharing Retirement Fund contributions, whether or not employees contribute, plus the option to make personal contributions to a 401(k).
Paid parental leave and family benefits, including elective egg freezing, surrogacy, and adoption reimbursement.
Paid time off, including 12 holidays per year, an annual office closure between Christmas and New Year’s, and 15 vacation days per year.
Paid sick time on an as-needed basis.