BCG Platinion | Senior AI Tech Consultant, Cybersecurity

Boston Consulting Group•Toronto, ON

31d•CA$156,000•Hybrid

About The Position

As a Cybersecurity Senior AI Tech Consultant, you'll be given end-to-end responsibility for an individual 'module' within a BCG client engagement and begin to develop specialized knowledge to help you solve our clients' problems. You'll work on a variety of cybersecurity and digital risk topics, applying generalist consulting skills to strategic cybersecurity & digital risk questions. We are looking for someone who can address our clients’ strategic, organizational, managerial, and operational issues using the most advanced cybersecurity methodologies, tools, and techniques.

Requirements

4+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts.
BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree.
Hands-on experience with, or extensive knowledge of some of the following: Developing cybersecurity strategies or policies.
Quantifying and managing cybersecurity risk.
Designing, transforming, implementing, and running cybersecurity programs
Assessing cybersecurity risks in AI platforms
Integrating security into applications and systems
Implementing cloud security
Managing cybersecurity risk arising from third parties and the supply chain
Designing / implementing identity and access management
Developing and upskilling a cybersecurity workforce
Delivering cybersecurity culture change, awareness, and training
Designing continuous monitoring programs incorporating SIEM tools, APT hunting, implementing UBA, etc.
Designing / implementing vulnerability management, including conducting vulnerability assessments
Performing penetration testing, incident management, BCP, and/or DRP
Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle.
Working knowledge of at least two different cybersecurity frameworks: NIST Cybersecurity Framework, C2M2, NIST SP 800-53 and companion publications, ISO/IEC 27000 family of standards, etc., Cloud Security Alliance CCM.
Team-oriented attitude.
Strong communication and presentation skills.
Outstanding analytical and conceptual skills.
Results-orientated mindset.
Confidence and persuasiveness.
GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses.
Business-fluent written and spoken English language skills.
Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects.

Responsibilities

Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions.
Business-minded story tellers. They leverage their deep-technical understanding of cybersecurity challenges and translate that into implications across the business value chain
Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients.
Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices.
Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams.
Understanding the role technology plays in enabling businesses to execute their strategies and decomposing the cybersecurity implications of this relationship.
Analyzing cybersecurity requirements, current tools, and best practices to translate into a meaningful set of recommendations tailored to a client’s unique environment and circumstances.
Communicating complex and technical concepts in a concise and business value-centric written form.
Implementing cybersecurity transformation and culture change initiatives.
Conducting cybersecurity assessments including gap analysis and roadmap development in multiple contexts, including organizations, product development, and cloud security.
Developing cybersecurity strategies, policies, processes, and procedures to protect clients’ internal infrastructure and their customers.
Understanding data protection, data security, and privacy drivers that influence organizations today.
Developing cybersecurity business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits.
Working with leadership teams, including facilitating board and senior management cybersecurity awareness workshops.
Embedding product security and DevSecOps practices into the software development lifecycles, system designs, and IT architectures.
Utilizing cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making.
Creating and facilitating table-top exercises.
Delivering operational resilience through incident response, business continuity, and disaster recovery planning

Benefits

An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications.
A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment.
Annual discretionary performance bonus
Retirement contribution
Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children.
100% coverage for prescription drugs, with no dispensing fee maximum.
Access to Telemedicine – virtual care when you need it.
Substantial mental health support, including mental health practitioner coverage and access to meditation and well-being apps.
Dental coverage, including orthodontia benefits for children and adults.
Robust vision coverage.
Flexible Spending Account for additional medical and wellbeing activities.
Retirement contributions made annually (whether you contribute or not), plus the option for employees to make personal contributions to an RRSP Plan.
Premier Family programs including, paid parental and family care leaves, and reimbursement for fertility, surrogacy, and adoption expenses.
Generous paid time off, including 10 public holidays and 2 floater days, office closure between Christmas and New Year’s, and 15 vacation days (earned at 1.25 days per month) annually.
Paid sick time on an as needed basis.