BCG—Global IT Security Engineer Manager

Job description

Description: Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do BCG is looking for innovative and effective ways to safeguard collaboration experiences and protect BCG and client data. Our security engineering team is tasked with partnering with our SaaS and Sustaining Engineering teams, as well as our Solution Architecture team, to ensure that we are executing the security policies of our organization effectively. This role spans across the entirety of the Digital Collaboration product portfolio as part of our central control plane management. In partnership with your team members, your duties will include: • Designing, administering, and configuring collaboration security capabilities across Microsoft 365 and non-Microsoft platforms. • Implementing data lifecycle management, retention, and records management capabilities • Applying defense-in-depth principles and compliance-by-default thinking to configurations and operational activities • Creating and improving technical solutions for defined use cases and emerging requirements • Executing vulnerability management and event detection activities across existing BCG solutions, in alignment with Security Operations direction • Partnering with our Secure Data squad to tune and improve Data Loss Prevention capabilities and policy efficacy • Identifying opportunities to automate and streamline security analysis, response, and policy configuration • Serving as an escalation point for high-visibility or high-criticality issues, including regional or global outages involving our IT Services team and external vendor partners when necessary • Working with Security Architecture to define and execute an enterprise-scale, automation-first approach to data labeling and classification • Troubleshooting Purview and broader security suite issues, including the creation of automated and agentic resolution approaches • Designing, monitoring, and responding to service health needs • Creating and maintaining documentation and runbooks • Supporting other areas of BCG Digital Collaboration team as needed What You'll Bring • Understanding of security controls frameworks and operational excellence procedures and protocols • Strong knowledge of the security and compliance product market • Working knowledge of scripting (i.e. Powershell), workflow automation (i.e. Power Automate), and API consumption (i.e. Microsoft Graph) is preferred. • Prior experience implementing and administering Microsoft Purview and/or Defender • Solid knowledge of enterprise collaboration platforms, including Microsoft 365 and Google Workspace, messaging, whiteboarding, and virtual conferencing tools • Experience working in complex enterprise organizations with multi-vendor ecosystems, including the ability to help disparate platforms operate together effectively and identity pain points or capability gaps • Proven experience solving complex problems with simple, effective solutions • Understanding of security concepts and how data flows through collaboration tools, including how to protect data at rest and in transit across corporate and public networks • Prior knowledge of GenAI tool security and governance strongly preferred • Level C2 English proficiency as demonstrated by IELTS 7+, TOEFL iBT 94+, TOEIC 901+, CAMBRIDGE CPE, or comparable demonstrated proficiency. Who You'll Work With This individual will collaborate with other BCG information technology teams such as ISRM, Identity, Secure Infrastructure Platforms, and Personal Productivity to ensure alignment with BCG’s overall IT architecture plan. Additional info YOU’RE GOOD AT • Thinking creatively and entrepreneurially to develop concepts and solutions for the firm’s most challenging collaboration needs • Applying a security and compliance mindset, with the ability to anticipate risks and identify problems or patterns early • Using strong problem-solving skills to identity and resolve issues quickly • Working independently as well as part of a virtual, geographically dispersed team while maintaining ownership and a bias towards action • Handling difficult or stressful situations with poise, tact, patience, and empathy • Applying strong analytical skills, attention to detail, and a high standard for quality • Bringing change management and engineering discipline to protect the integrity of production environments • Working in an agile delivery environment to define, manage, and track work in Jira • Communicating clearly in verbal, written, and presentation settings, including explaining technical concepts to non-technical audiences. • Collaborating across functions and influencing outcomes without relying on direct authority. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify. Skills: microsoft 365 collaboration security, data lifecycle management, vulnerability management, compliance-by-default, security operations, technical solution design, security architecture, security controls frameworks, incident response, service health monitoring, documentation and runbook creation, scripting (powershell), workflow automation (power automate), api consumption (microsoft graph), microsoft purview administration, defender administration, enterprise collaboration platforms, google workspace, messaging tools, virtual conferencing tools, genai tool security, change management, problem solving, analytical skills, jira, english proficiency (ielts, toefl, toeic, cambridge cpe)