Data Security Engineer - BCG FED

The Boston Consulting Group (BCG) - Atlanta, GA

Full-time

Atlanta, GA

Professional, Scientific, and Technical Services

About the position

The BCG FED Organization is seeking a knowledgeable and talented Data Security Engineer who will be responsible for operating and maintaining the BCG Data Governance program in alignment with NIST 800-171, CMMC, and IT Security best practices. This role is critical in ensuring the integrity and security of data throughout its lifecycle, from ingestion to purging. The Data Security Engineer will manage the Data Lifecycle for both BCG and Client data, ensuring that data is handled appropriately at every stage of its existence. This includes overseeing the processes of data ingestion, storage, processing, transmission, and eventual purging from the system. In addition to lifecycle management, the Data Security Engineer will take ownership of the Business Continuity strategy for data, ensuring that there are robust plans in place to maintain data availability and integrity in the event of disruptions. The role also involves enhancing and maintaining the Data Classification strategy, ensuring it aligns with both business and client requirements. The engineer will be tasked with translating compliance and client contractual obligations into a comprehensive data protection schema, which is essential for maintaining trust and meeting regulatory requirements. Collaboration is key in this position, as the Data Security Engineer will work closely with engineering and cloud teams to lead effective process improvements. Monthly metrics reporting will be a part of the role, where the engineer will identify and manage gaps in data protection policy and work towards resolving these issues. Additionally, documenting Data Protection processes and procedures will be a critical responsibility, ensuring that there is a clear and accessible record of practices and protocols.

Responsibilities

• Management of the Data Lifecycle for BCG and Client data as data is ingested, stored, processed, transmitted, and purged from the system.
• Ownership of the Business Continuity strategy for data.
• Enhance and maintain the Data Classification strategy in alignment with business and client requirements.
• Translate compliance and client contractual obligations into a data protection schema.
• Collaborate with engineering and cloud teams to lead effective process improvements.
• Provide monthly metrics reporting, identify, and manage gaps in data protection policy, and work to resolve.
• Document Data Protection process and procedures.

Requirements

• 5-8+ years of experience in information security.
• 3-5+ years of Data Classification technical capabilities and strategies.
• Encryption and Data Loss Prevention (DLP) experience.
• Experience with Business Continuity to include backup capabilities.
• Ability to foresee and identify mitigation strategies for risks.
• Knowledge of security issues, trends and best practices.
• Experience with Microsoft Azure and O365.
• U.S. citizenship required.
• Ability to obtain and maintain a Secret Security Clearance (if required).