BCG Platinion | Senior Consultant, Cybersecurity, Data Privacy

Boston Consulting Group•Durham, NC

About The Position

As a Cybersecurity Senior Consultant at BCG TDA/Platinion, you will work with BCG clients to protect organizations’ most valuable digital, intellectual, and human assets against malicious attacks and fatal errors. In this role, you will apply your sound technical expertise, understanding of business contexts, and analytical skills to enable organizations’ security priorities - while embedding robust data privacy practices across strategic and technology engagements. You will help strategize and design solutions that not only safeguard sensitive information but also build customer trust and ensure compliance with evolving data protection standards. You will also work in multidisciplinary teams to help businesses improve their products and create market growth strategies through secure, privacy-respecting innovation. Cybersecurity Consultants at BCG Platinion are: Technical experts. They are critical thinkers and have extensive cybersecurity expertise that drives innovative solutions. Innovators. They understand and leverage cutting-edge cybersecurity approaches and tactics to create customized solutions for clients. Change agents. They know how to make change happen across an organization. They can align and onboard teams to implement new cybersecurity process and toolsets. They embrace complex challenges and guide an organization to optimize their cybersecurity practices. Collaborative. They are interdisciplinary team players who seek alignment and establish relationships ranging from cross-functional stakeholder groups to existing security teams.

Requirements

4+ years of professional experience in the execution and management of technology (Prior experience at a consulting organization is highly preferred).
BS in mathematics, natural sciences, information technology, business management, or similar degree.
Hands-on experience with, or extensive knowledge of some of the following:
Developing cybersecurity and/or data governance strategies or policies.
Managing cybersecurity and data privacy risk.
Designing, transforming, implementing, and running cybersecurity and data governance programs.
Implementing integrated risk management solutions.
Delivering cybersecurity and data privacy culture change, awareness, and training.
Designing / implementing business resilience programs.
Ability to navigate and advise on complex, evolving privacy regulatory landscape, especially new laws.
Working on data privacy projects that span across requirements engineering, design, technical implementation, and/or technical program management is required.
Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle.
Working knowledge of at least two different cybersecurity frameworks:
NIST Cybersecurity Framework.
NIST Privacy Framework.
ISO/IEC 27000 family of standards, etc.
C2M2
NIST SP 800-53 and companion publications.
Cloud Security Alliance CCM.
The CRI Profile.
Knowledge and experience with major digital risk and technology regulatory environments.
Business and technical fluency in major data protection laws (e.g., GDPR, CCPA, CPRA).
Team-oriented attitude.
Strong communication and presentation skills.
Outstanding analytical and conceptual skills.
Results-orientated mindset.
Confidence and persuasiveness.
GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses.
Willingness to travel around the globe to work with clients and BCG teams. At times, this role involves significant travel to client sites. The amount of travel will depend on client needs and nature of projects.

Nice To Haves

CISSP, CIPP/E, CIPP/US preferred.

Responsibilities

Developing tailored, customized cyber and data privacy solutions to address our client’s challenges.
Implementing cybersecurity and data governance program transformation and culture change initiatives.
Developing cyber, risk, and/or data strategies, policies, processes, and procedures to protect clients’ internal infrastructure and their customers.
Collaborating with cross-functional teams to seamlessly integrate cybersecurity measures into GenAI solutions, ensuring the protection of sensitive data and the resilience of systems against evolving threats.
Understanding and application of digital, IT, cloud computing and data strategy best practices to enhance cybersecurity and privacy.
Developing cybersecurity and data governance business strategies for technology product vendors that are integrated in the organizations overall business strategy and increase revenue and profits.
Working with leadership teams, including facilitating board and senior management cybersecurity and privacy awareness workshops.
Helping clients with incident response readiness, by creating and facilitating table-top exercises, business continuity and disaster recovery plans.

Benefits

An opportunity to work organically across disciplines and across BCG, we offer a unified and unrivaled opportunity that combines strategic thinking with hands-on applications.
A unique experience to work alongside a team of passionate and driven problem-solvers with a mission to deliver innovative and valuable digital solutions in a supportive environment.
In addition to your base salary, you will also be eligible for an annual discretionary performance bonus and BCG’s Profit Sharing and Retirement Fund (PSRF) contribution.
BCG also provides a market leading benefits package described below.
Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children.
$10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs.
Dental coverage, including up to $5,000 (USD) in orthodontia benefits.
Vision insurance with coverage for both glasses and contact lenses annually.
Reimbursement for gym memberships and other fitness activities.
Fully vested retirement contributions made annually, whether you contribute or not.
Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years.
Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement.
Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage.