Who We Are
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.
To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.
What You'll Do
As a member of BCG’s Information Security team, you will lead strategic initiatives that strengthen the firm’s Information Security Risk Management (ISRM) program. You will oversee a portfolio of operational and transformational work, driving governance, execution, and continuous improvement while ensuring programs deliver measurable business value across a global environment.
Your work will help strengthen the governance, resilience, and continuous evolution of BCG’s global Information Security program, enabling the firm to effectively manage risk while supporting innovation and business growth.
In this role, you will partner with stakeholders across Information Security, Risk and IT to deliver complex, cross-functional initiatives. You’ll balance day-to-day operational excellence with long-term program evolution, helping shape scalable processes, improve organizational effectiveness, and advance BCG’s global security strategy.
-
Drive program governance, portfolio planning, financial oversight, risk management, executive reporting, and stakeholder communications across multiple initiatives.
-
Establish and continuously improve operational processes, frameworks, and standards that strengthen Information Security program delivery.
-
Lead complex Information Security programs from planning through execution, ensuring delivery against strategic priorities.
-
Partner with senior stakeholders across Information Security, Risk, Legal, Data Privacy, and IT to align priorities, manage dependencies, and drive successful outcomes.
-
Manage program roadmaps, milestones, risks, issues, and resource planning while adapting to evolving business priorities.
-
Prepare and present monthly program reports and executive-ready dashboards for senior stakeholders, providing clear insights into program performance, risks, and key milestones.
-
Define, track, and continuously improve program metrics and executive dashboards that provide visibility into performance, delivery, and organizational impact.
-
Identify opportunities to improve efficiency, simplify processes, and embed scalable ways of working across the Information Security organization.
What You'll Bring
-
7+ years of experience leading complex programs or portfolios within Information Security, Cybersecurity, Risk, or a related function in a global organization.
-
Proven experience delivering cross-functional initiatives, balancing operational priorities with strategic transformation.
-
Strong program and project management expertise, including planning, governance, financial management, risk management, executive reporting, and Agile delivery methodologies.
-
Experience developing meaningful performance metrics, executive dashboards, and monthly reporting for senior stakeholders to support informed decision-making.
-
Experience leveraging tools and digital technologies to streamline program delivery, reporting, analysis, and operational processes while improving efficiency and decision-making.
-
Ability to influence and build trusted partnerships across technical and business teams, including senior leaders.
-
Strong analytical, organizational, and problem-solving skills with the ability to manage competing priorities in a fast-paced environment.
-
Excellent written and verbal communication skills in English, with the ability to translate complex information into clear, executive-ready communications.
-
Bachelor’s degree or equivalent experience; project management certification (such as PMP, PRINCE2, or Agile certification) and knowledge of Information Security or Cybersecurity practices are advantageous.
Who You'll Work With
You’ll report to the Director, Security Program Operations and join BCG’s global Information Security team, partnering with a network of program and project managers dedicated to strengthening the firm’s Information Security Risk Management program.
You’ll collaborate closely with colleagues across Information Security, Risk, Legal, Data Privacy, and IT, as well as business stakeholders across the firm. By building trusted relationships with senior leaders and cross-functional teams, you’ll help align priorities, accelerate strategic initiatives, and deliver secure, scalable solutions that support BCG’s global operations.
Additional info
"At BCG, our people and relationships are at the heart of everything we do. We believe that in-person collaboration plays an important role in our culture, mentorship, and professional development.
For this role, you will generally be expected to work from a BCG office or in person with clients on a regular basis (typically around 50% of working time), depending on business needs and in line with local policies and practices.
We aim to provide a dynamic and collaborative environment that fosters connection and teamwork."
Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.
