Security and Risk Director

Boston Consulting Group•Washington, DC

7d•$167,000 - $198,000•Hybrid

About The Position

The Security and Risk Director serves as the senior security and risk leader for BCG’s U.S. Federal Government business, with expanding responsibilities for State and Local Government. Reporting to the BCG Federal Corp Senior Director, the role provides strategic oversight, executive advisory, and operational leadership to protect the firm’s people, information, operations, and ability to conduct government business. The Director establishes and executes strategies to meet applicable government security requirements, safeguard classified information and Controlled Unclassified Information (CUI), and strengthen organizational resilience. The Director oversees the Facility Security Officer (FSO), leads business responses to sensitive information incidents, and drives security governance, employee training, and business continuity planning. The role works with government business leaders and corporate functions to turn complex security requirements into practical business solutions, manage emerging risks, and support growth and successful delivery of government engagements. The position is hybrid, with an expectation of working in the office three to five days per week; it is not intended for remote or virtual work.

Requirements

U.S. citizen with an active security clearance at TS or above.
At least 10 years of professional experience, with demonstrable impact and progressively increasing responsibility.
Prior experience supporting national security, defense, intelligence, state and local, or other highly regulated customers.
Broad cross-functional expertise in U.S. federal security, compliance, and regulatory matters.
Outstanding written and verbal communication skills.
Ability to navigate complex problems and develop pragmatic, actionable solutions.
Demonstrated AI literacy, including understanding AI-related security and compliance risks and opportunities to improve operational efficiency.
Experience managing direct reports.
Strong knowledge of Microsoft Office Suite; SharePoint, Outlook, Word, and PowerPoint are essential.

Nice To Haves

Advanced degree or certifications in business, law, risk, security, or a related field.
Experience or expertise with ITAR and Foreign Ownership, Control, and Influence (FOCI) factors and mitigation techniques.

Responsibilities

Advise BCG Federal leadership on security and risk, represent the organization’s security risk posture to executive leadership, Board committees, governance forums, regulators, and external auditors, and facilitate risk escalation and acceptance decisions within established governance and delegated authority.
Develop and execute security and risk management strategies, governance frameworks, and policies for BCG Federal and the broader U.S. Public Sector business.
Identify systemic gaps and emerging risks, prioritize remediation, and drive continuous improvement in security program effectiveness.
Establish risk reporting, performance metrics, and escalation protocols to provide leadership visibility into material risks, compliance obligations, and corrective actions.
Provide strategic oversight of the Facility Security Officer and industrial security function, including personnel and facility clearances, continuous vetting, classified contracts, and related government security obligations.
Oversee compliance with applicable federal security regulations, contractual obligations, agency requirements, and the National Industrial Security Program Operating Manual (NISPOM).
Establish governance for protecting and handling classified information and CUI in partnership with the FSO, Government Cybersecurity, and relevant functions.
Review business development opportunities, project scopes, and contractual requirements for security risks, and advise leadership on compliance throughout engagements.
Oversee BCG Federal’s export compliance program, including governance, policies, procedures, training, and monitoring.
Partner with Legal, Contracts, Compliance, and business leadership to assess export control risks and coordinate authorization processes for sensitive defense and international government programs.
Assess business implications of federal IT and data security requirements, including Section 889, DFARS 252.204-7012, NIST SP 800-171, and CMMC, and partner with Government Cybersecurity on assessment readiness and ongoing compliance.
Coordinate with Government Cybersecurity and stakeholders on insider threat and Foreign Ownership, Control, or Influence (FOCI) mitigation requirements.
Lead business responses to incidents involving classified information, CUI, or other sensitive government information, including escalation, business impact assessment, remediation oversight, and executive communications.
Coordinate incident containment, investigation, reporting, and corrective actions with the FSO, Government Cybersecurity, Legal, Compliance, and other stakeholders.
Establish and oversee business continuity and operational resilience plans for security-related disruptions, including sensitive information spills.
Lead post-incident reviews and improve security policies, controls, training, and response procedures.
Partner with federal business leadership and corporate stakeholders to navigate security requirements, manage risks, and enable business objectives.
Oversee security awareness and training for federal and relevant U.S. Public Sector personnel, covering classified information handling, CUI protection, incident reporting, and regulatory obligations.
Drive AI tools, automation, and process improvements to improve security program visibility, compliance tracking, workflow management, and support for client-facing teams.
Lead and develop the security team by setting priorities and performance expectations, planning resources, and coaching and mentoring team members.

Benefits

Annual discretionary performance bonus of up to 30%.
Retirement contribution starting at 5% and increasing to 10% after two years.
Medical, dental, and vision coverage for employees and eligible family members at no premium cost to employees.
Low $10 copays for doctor visits, urgent care, and generic prescriptions.
Dental coverage, including up to $5,000 in orthodontia benefits.
Vision coverage for glasses and contact lenses annually.
Reimbursement for gym memberships and other fitness activities.
Fully vested annual Profit Sharing Retirement Fund contributions and the option to contribute personally to a 401(k) plan.
Paid parental leave and family benefits, including elective egg freezing, surrogacy, and adoption reimbursement.
Paid time off including 12 holidays, an annual office closure between Christmas and New Year’s, and 15 vacation days per year.
Paid sick time as needed.