Global Cybersecurity Senior Manager – Architecture

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

As the Global Cybersecurity Senior Manager – Architecture, you will help strengthen BCG’s global cybersecurity environment by leading security architecture and governance for enterprise endpoints, mobile devices, servers, containers, and cloud workloads. You will define security requirements, establish architectural standards, and guide the design of secure, resilient infrastructure that protects BCG’s people, systems, and information. Your work will support BCG’s Zero Trust strategy while enabling secure and efficient technology delivery across the firm.

As part of the Infrastructure Security Architecture team within Information Security Risk Management (ISRM), you will serve as a key security architecture partner to the Secure Devices Engineering Squad. You will provide technical direction, architectural oversight, and risk-based guidance throughout the solution lifecycle, working closely with engineering teams responsible for implementation and operations. Through these partnerships, you will help strengthen security practices, resolve complex architectural challenges, and advance enterprise security objectives.

Key Responsibilities

- Define and maintain device and workload security architecture: Establish and maintain security architecture standards for enterprise endpoints, mobile devices, servers, containers, and cloud workloads, including configuration baselines, hardening requirements, endpoint protection, and security compliance, underpinned by an authoritative, continuously reconciled device and asset inventory, and developing reference architectures that integrate device trust, endpoint compliance, and identity-based access controls to strengthen Zero Trust protections across BCG’s infrastructure.
- S trengthen endpoint security and device management: Establish architectural requirements for enterprise device management platforms, including Microsoft Intune and Jamf, endpoint detection and response (EDR), device compliance, and security controls supporting trusted access to enterprise resources.
- Own cryptographic resilience for endpoints and servers: Define requirements for quantum-resistant full-disk encryption and PQ-aware key management across the device estate, and crypto-agile hardening standards enabling transition to post-quantum algorithms without re-architecture.
- Advance endpoint privilege management and server security: Guide security requirements for endpoint privilege management, local administrator access, just-in-time privilege elevation, server hardening, and patch management across on-premises and cloud environments.
- Drive container and cloud workload security: Define security architecture requirements for containerized workloads, server protection, and cloud-native application protection platforms (CNAPP/Wiz). Establish standards for workload visibility, vulnerability management, configuration hardening, and security posture.
- Drive automation and policy-as-code adoption: Advance device security controls, configuration drift detection, and automated remediation workflows, partnering with engineering to move device governance from manual review toward continuous, automated validation.
- Provide security architecture governance: Conduct security architecture reviews for device and workload initiatives, issuing dispositions, conditions, and architectural decision records; partner with the Secure Devices Engineering Squad, global technology teams, and Security Operations across the delivery lifecycle to integrate security requirements and validate control effectiveness through implementation; route exceptions through ISRM governance with documented compensating controls and risk acceptance, escalating unresolved architectural risk through the Infrastructure Security Architecture Lead.
- Define device telemetry requirements: Establish device and endpoint telemetry requirements in partnership with Security Operations, which owns SIEM integration, detection engineering, and continuous monitoring.

What You'll Bring

- 6–10 years of experience in security architecture, infrastructure security, or security engineering.
- Deep expertise in endpoint security architecture, including Microsoft Intune, Jamf, EDR, and device management.
- Experience securing servers, containers, and cloud workloads using hardening standards and cloud security platforms.
- Strong knowledge of Zero Trust architecture, endpoint privilege management, CNAPP platforms (e.g., Wiz), and enterprise security frameworks, including container security benchmarks (NIST SP 800-190, CIS).
- Demonstrated ability to exercise architectural authority and independent risk-based judgment, communicating technical decisions clearly and building consensus across global engineering, security, and technology teams.

Who You'll Work With

You will work within ISRM’s matrixed environment, partnering with Security Operations, Risk Management, and architecture peers to advance device- and workload-centric Zero Trust maturity.

Additional info

At BCG, our people and relationships are at the heart of everything we do. We believe that in-person collaboration plays an important role in our culture, mentorship, and professional development.

For this role, you will generally be expected to work from a BCG office or in person with clients on a regular basis (typically around 50% of working time), depending on business needs and in line with local policies and practices.

We aim to provide a dynamic and collaborative environment that fosters connection and teamwork.

*** For US locations only ***

In the US, we have a compensation transparency approach.

Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below.

The base salary range for this role in Atlanta is $155,000 -$191,000.

This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness.

In addition to your base salary, your total compensation will include a bonus of up to 20% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years.

All of our plans provide best in class coverage:

- Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children
- Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs
- Dental coverage, including up to $5,000 in orthodontia benefits
- Vision insurance with coverage for both glasses and contact lenses annually
- Reimbursement for gym memberships and other fitness activities
- Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan
- Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement
- Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month)
- Paid sick time on an as needed basis

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E - Verify Employer. Click here for more information on E-Verify.