Senior Consultant, Cybersecurity - Platinion

The Boston Consulting Group (BCG) - Atlanta, GA

Full-time - Mid Level

Atlanta, GA

Professional, Scientific, and Technical Services

About the position

As a Senior Consultant at BCG Platinion, you will take on end-to-end responsibility for an individual module within a client engagement, developing specialized knowledge to address complex cybersecurity and digital risk challenges. Your role will involve applying generalist consulting skills to strategic cybersecurity questions, leveraging advanced methodologies, tools, and techniques to deliver innovative solutions. You will be expected to analyze cybersecurity standards, regulatory requirements, and best practices, translating these into tailored recommendations for clients. Your expertise will be critical in implementing cybersecurity transformation initiatives and culture change within organizations, ensuring that clients are equipped to navigate the evolving digital landscape. In this position, you will conduct comprehensive cybersecurity assessments, including gap analysis and roadmap development, across various contexts such as organizational structures, product development, and cloud security. You will also be responsible for developing cybersecurity strategies, policies, and procedures that protect clients' internal infrastructures and their customers. Your role will require you to work closely with leadership teams, facilitating workshops to raise cybersecurity awareness and embedding security practices into software development lifecycles and IT architectures. As a change agent, you will guide organizations in optimizing their cybersecurity practices, aligning teams to implement new processes and toolsets. You will be comfortable working through ambiguity and will possess strong analytical and conceptual skills to navigate complex challenges. Your ability to communicate technical concepts in a business-centric manner will be essential in driving value for clients and ensuring that cybersecurity is integrated into their overall business strategies.

Responsibilities

• Take end-to-end responsibility for individual modules within client engagements.
• Analyze cybersecurity standards, regulatory requirements, and best practices to provide tailored recommendations.
• Implement cybersecurity transformation and culture change initiatives.
• Conduct cybersecurity assessments, including gap analysis and roadmap development.
• Develop cybersecurity strategies, policies, processes, and procedures to protect clients' infrastructure.
• Facilitate board and senior management cybersecurity awareness workshops.
• Embed product security and DevSecOps practices into software development lifecycles.
• Utilize cyber risk quantification to improve executive decision-making.
• Create and facilitate table-top exercises for incident response and business continuity planning.

Requirements

• 4+ years of practical experience in cybersecurity consulting or management with teams of five or more.
• Bachelor's degree in cybersecurity, information systems, mathematics, natural sciences, business management, or a similar field.
• Hands-on experience with developing cybersecurity strategies or policies.
• Knowledge of quantifying and managing cybersecurity risk.
• Experience leading security assessments and designing cybersecurity programs.
• Familiarity with cloud security and managing third-party cybersecurity risks.
• Understanding of data protection, data security, and privacy drivers.
• Ability to communicate complex technical concepts in a business value-centric manner.
• Strong analytical and conceptual skills with a results-oriented mindset.

Nice-to-haves

• Working knowledge of at least two different cybersecurity frameworks such as NIST Cybersecurity Framework or ISO/IEC 27000 family of standards.
• Experience in performing continuous monitoring activities using SIEM tools.
• Knowledge of vulnerability management and conducting vulnerability assessments.
• Experience in penetration testing and incident management.

Benefits

• Comprehensive benefits package including health insurance, retirement fund contributions, and performance bonuses.
• Opportunities for professional development and career advancement.
• Supportive work environment with a focus on innovation and collaboration.