About Us
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. With over 50 years of experience, we have helped clients drive growth, build competitive advantage, and deliver bottom-line impact through our leading-edge management consulting services.
To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. We deliver solutions through cutting-edge management consulting along with technology and design, corporate and digital ventures—and business purpose.
The Role
The Global Risk Security Architect Expert Director is a strategic leader responsible for defining and implementing Boston Consulting Group's enterprise security architecture. This role ensures the protection of data, intellectual property, and client assets by designing secure, scalable, and resilient systems that align with the firm's business goals and security standards.
The architect leads efforts to integrate security into every stage of IT systems development, ensuring alignment with agile practices, emerging technologies, and zero-trust principles. By leveraging robust governance and cross-functional collaboration, the architect ensures secure innovation, operational resilience, and effective risk management.
* Key Responsibilities:
* Security Architecture Leadership:
o Define and enforce secure engineering practices and frameworks, including reusable reference architectures and secure-by-design standards
o Develop and maintain security blueprints aligned with Agile/DevSecOps methodologies
o Ensure security is embedded in all IT projects, including secure code reviews, vulnerability testing, and automated CI/CD pipeline integration
* Emerging Technology Integration:
o Drive the adoption of advanced technologies, including zero-trust architectures, secure APIs, and cryptographic solutions
o Leverage AI/ML, containerization, and cloud-native security practices to enhance enterprise defenses
* Continuous Improvement:
o Use insights from incident analysis, threat intelligence, and testing outcomes to refine and enhance security architectures
o Collaborate with operational teams to integrate feedback loops that ensure continuous alignment with evolving threats
What You'll Bring
To be successful in this role, you will need:
* A bachelor's degree or equivalent
* A minimum of 10 years of progressive experience in information security, with strong expertise in enterprise security architecture
* Proven experience in cloud security, zero-trust architecture, API security, and DevSecOps pipelines
* Hands-on experience designing secure architectures for hybrid cloud environments
* Deep understanding of zero-trust frameworks, secure-by-design standards, and agile methodologies
Who We Are Looking For
We are seeking an experienced security professional who can partner with our internal IT, business leaders, and consultants to drive the firm's security strategies, enabling secure innovation and digital transformation.