{"id":3200736,"url":"https://alion.io/job/bcg-x-global-cybersecurity-director-architecture","title":"Global Cybersecurity Director - Architecture","company":{"id":655,"name":"Boston Consulting Group","domain":"bcg.com","url":"https://alion.io/company/bcg-x","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lisbon, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":161000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":291},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"LLM","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Microsoft Entra ID","optional":true},{"name":"Okta","optional":true}],"status":"live","first_seen_at":"2026-10-16T00:00:00Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-29T03:19:28Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Who We Are\nBoston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.\nTo succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.\nWhat You'll Do\nThis is an opportunity to shape the future of BCG’s global infrastructure security and build the architecture practice that delivers it. As the Infrastructure Security Architecture Lead, you will own the security architecture, standards, and Zero Trust direction for BCG’s core infrastructure across the identity, network, device, and data pillars, and you will line-manage and grow the team of architects aligned to each pillar. You will be accountable for the coherence, quality, and maturity of the architecture that protects the firm’s global infrastructure.\nAs part of Information Security Risk Management (ISRM), you will operate through a shared accountability model with Platform Engineering: your team provides architectural direction, governance, and design oversight through the solution lifecycle, while engineering retains ownership for delivery and operations. You will be the senior escalation point for architectural risk within the domain and will represent Infrastructure Security Architecture in enterprise governance. Success requires people leadership, architectural judgment across multiple infrastructure domains, and the ability to influence senior stakeholders in a matrixed global organization.\nKey Responsibilities\nTeam Leadership and People Management\nLine-manage, develop, and grow the architects aligned to the Secure Identity, Secure Network, Secure Device, and Secure Data pillars; set objectives, manage performance, and build the team out to full coverage.\nEstablish consistent ways of working and quality bars so the domain operates as a coherent function, and act as mentor and escalation point for complex design decisions.\nBalance architectural capacity across pillars toward the highest-risk and highest-priority initiatives.\nDomain Architecture and Strategy\nOwn the security architecture strategy, reference architectures, and target-state roadmap across the identity, network, device, and data pillars, advancing ZTMM maturity aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model.\nEnsure architectural coherence across pillars, resolving cross-cutting dependencies (identity lifecycle propagation, certificate lifecycle, entitlement governance) rather than allowing point solutions to harden into enterprise patterns.\nSet the direction for strategic target architectures per control family, socialized with Enterprise Architecture and traceable to enterprise strategic targets.\nStandards and Governance\nLead the creation and maintenance of control-family standards in alignment with Security Governance, Risk, and Compliance (SGRC), socializing standards with configuration item (CI) owners for viability before enforcement and agreeing control disposition with SGRC and SAVE.\nOwn security architecture reviews and exception dispositions for the domain, ensuring decisions are consistent, defensible, and traceable to ISRM governance.\nRepresent Infrastructure Security Architecture in enterprise governance forums (Change Advisory Boards, Design Authorities) and advocate for risk-based prioritization across the Security Portfolio.\nMaintain and leverage the team’s AI-assisted tooling for standards development and control-alignment review, with appropriate human oversight.\nEngineering Partnership\nServe as the architecture counterpart to the infrastructure engineering squads: validate feasibility and effectiveness of controls through implementation without assuming delivery ownership, and hold engineering accountable for meeting SecArch requirements.\nReinforce the ISRM operating model: Security Architecture designs and governs; Security Operations owns monitoring, SIEM, and detection; assurance and audit sit with SAVE and SGRC. Specify the telemetry requirements needed for the domain’s services to be observable.\nYou’re Good At\nBuilding and developing a high-performing architecture team, and growing a function from a small base into full coverage.\nBuilding consensus while maintaining architectural integrity across complex, cross-domain technology initiatives.\nMaking defensible architectural decisions under ambiguity and time pressure, and making them stick.\nInfluencing senior stakeholders across engineering, Enterprise Architecture, and security leadership in a matrixed global organization.\nTranslating enterprise security strategy into practical standards and implementable engineering requirements.\nWhat You'll Bring\nBachelor’s degree in a relevant field or equivalent practical experience.\n10+ years in security architecture, security engineering, or infrastructure security, including demonstrated architecture responsibility across more than one infrastructure domain.\nPrior people-management or team-lead experience, or clear readiness to take on line management of a technical team.\nExperience operating in large, audit-sensitive, or regulated enterprise environments with formal governance and exception processes.\nStrong understanding of Zero Trust architecture (NIST SP 800-207, CISA ZTMM), enterprise control frameworks, and hybrid cloud environments (Azure, AWS, GCP).\nBreadth across at least two of the infrastructure pillars (identity, network, device, data), with the ability to lead architects who hold deeper specialization in each.\nCommand of the governance and lifecycle disciplines that cut across pillars: identity lifecycle management, certificate and key lifecycle, and entitlement governance.\nExperience applying AI-assisted tools to security architecture work, with a clear understanding of LLM capabilities, limitations, and the need for human oversight.\nPreferred Qualifications\nExperience standing up or scaling a security architecture function or team.\nHands-on architecture background in one or more of: enterprise identity (Entra ID, Okta, PAM), network security (SSE, ZTNA, segmentation), endpoint/device security, or data protection.\nProfessional certifications such as CISSP, SABSA, TOGAF, or relevant cloud security certifications.\nWho You'll Work With\nYou will lead the Infrastructure Security Architecture team within Information Security Risk Management (ISRM), managing the architects aligned to each infrastructure pillar and reporting to the Senior Director of Cybersecurity Architecture. You will own the security strategy, architectural standards, and governance that guide the design and evolution of BCG’s core infrastructure platforms across identity, network, device, and data.\nYou will collaborate closely with engineering, cloud, identity, infrastructure, and security teams across BCG’s global technology organization to ensure security controls are consistently designed, implemented, and governed across the infrastructure domain. You will partner with Enterprise Architecture, Security Operations, Risk Management, and architecture peers to strengthen Zero Trust capabilities, advance security maturity, and support enterprise-wide cybersecurity initiatives.\nWorking within a highly collaborative, matrixed environment, you will set technical direction, build alignment on architectural decisions, develop your team, and help the organization deliver secure, scalable solutions that balance business objectives, operational effectiveness, and risk management.\nAdditional info\nRegular, Full-Time (local employment terms apply)\nBoston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.\nBCG is an E - Verify Employer. Click here for more information on E-Verify.","description_format":"text","description_chars":8746,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-24T08:17:26Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.778,"p_room":0.55,"age_days":13,"expected_fill_days":10,"reasons":["conf:2","velocity","win:tail","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/bcg-x-global-cybersecurity-director-architecture","json_url":"https://alion.io/job/bcg-x-global-cybersecurity-director-architecture.json","meta":{"generated_at":"2026-10-29T06:36:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10035,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":655},"rest":"https://alion.io/mcp/rest/get_company?id=655"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbcg-x-global-cybersecurity-director-architecture"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbcg-x-global-cybersecurity-director-architecture"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbcg-x-global-cybersecurity-director-architecture"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bcg-x-global-cybersecurity-director-architecture\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbcg-x-global-cybersecurity-director-architecture"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3200736}},{"tool":"search_jobs","arguments":{"company":"bcg.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3200736},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}