{"id":3201108,"url":"https://alion.io/job/bcg-x-information-security-senior-director-bcg-fed","title":"Information Security Senior Director – BCG Fed","company":{"id":655,"name":"Boston Consulting Group","domain":"bcg.com","url":"https://alion.io/company/bcg-x","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":null},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":169000,"max_usd":344000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":189},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CMMC","optional":false},{"name":"FedRAMP","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false}],"status":"live","first_seen_at":"2026-10-24T08:19:42Z","employer_posted_date":"2026-10-24","last_verified_at":"2026-10-30T10:21:29Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Locations: Washington | Boston\nWho We Are\nBoston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.\nTo succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.\nWhat You'll Do\nThe Information Security Senior Director serves as the primary executive authority on enterprise cybersecurity strategy, risk governance, and federal compliance for BCG Federal. Reporting regularly to the Government Security Committee (GSC) and executive leadership, the Information Security Senior Director holds direct authority to define and approve the federal IT security boundary, manage enterprise risk, and escalate unresolved security exposures. Operating as an executive peer alongside business and technology leaders, the Information Security Senior Director balances client mission enablement with rigorous defense compliance mandates.\nThe Information Security Senior Director leads a dedicated cyber organization of approximately 25 professionals and directs the strategic security interface between BCG Federal and BCG Global IT and Security. In this capacity, the Information Security Senior Director ensures our streamlined cloud environment-primarily Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines-remains properly isolated and compliant with Defense Counterintelligence and Security Agency (DCSA) standards, while safely leveraging global shared capabilities where permitted.\nKey Responsibilities\nExecutive Governance & GSC Advisory: Define enterprise security strategy, deliver regular security and compliance briefings to the Government Security Committee (GSC), and maintain risk governance aligned with federal missions and strategic corporate growth. \nTeam Leadership & Cyber Operations: Direct a 15-person cybersecurity organization across core functions, including security operations, compliance, cloud security architecture, IAM, and vulnerability management. \nGlobal Parent Alignment & Boundary Integrity: Partner with BCG Global CISO and IT leadership to maintain boundary isolation, data barriers, and access controls separating BCG Federal enclaves from commercial global infrastructure.\nCloud Architecture & Enclave Protection: Oversee the security architecture and boundary controls for a focused cloud environment centered on Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines, ensuring strict protection of Controlled Unclassified Information (CUI) and export-controlled data. \nFederal Compliance & Audit Ownership: Own enterprise compliance for NIST SP 800-171, NIST SP 800-53, DFARS 252.204-7012, and CMMC Level 2, leading System Security Plan (SSP) maintenance, SPRS scoring, and C3PAO/federal audit readiness. \nTechnology Controls Administration: Collaborate with Legal, the Facility Security Officer (FSO), and leadership to administer the Technology Control Plan (TCP) and ensure systems adhere to DCSA security requirements and governance obligations. \nBusiness Development & Mission Enablement: Partner with capture and client delivery teams to architect compliant, secure solutions for client enclaves and support proposal responses.\nAI Security Governance: Provide security and compliance oversight for vetting, deploying, and governing AI tools, LLMs, and emerging technologies within CUI-constrained environments. \nSupply Chain & Third-Party Risk (SCRM): Oversee vendor risk assessments, software supply chain security, and FedRAMP cloud service provider evaluations across subcontractors and external integrations. \nWhat You'll Bring\nExperience: 7-10+ years of IT security and information assurance experience, including 2-4+ years operating within the Defense Industrial Base (DIB) or a directly comparable national security environment.\nPeople Leadership: 7+ years of demonstrated success directly managing multi-disciplinary IT teams, setting operational rhythms, and mentoring technical leads.\nCloud & Infrastructure Mastery: Strong architectural knowledge of Microsoft GCC-High / Azure Government (Entra ID, Purview, Defender, Intune) and foundational AWS DevOps/IAM security baselines.\nRegulatory Expertise: In-depth understanding of NIST SP 800-171, DFARS 7012, CMMC Level 2, and DCSA oversight requirements.\nClearance: Active Top Secret clearance required\nEducation & Certifications: Bachelor’s degree in a relevant technical or government/business discipline. Recent coursework in AI and Cybersecurity a plus.\nAdditional info\nAt BCG, our people and relationships are at the heart of everything we do. We believe that in-person collaboration plays an important role in our culture, mentorship, and professional development.\nFor this role, you will generally be expected to work from a BCG office or in person with clients on a regular basis (typically around 50% of working time), depending on business needs and in line with local policies and practices.\nWe aim to provide a dynamic and collaborative environment that fosters connection and teamwork.\n*** For US locations only ***\nIn the US, we have a compensation transparency approach.\nTotal compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below.\nThe base salary range for this role begins at $225,000 in our lowest cost US region and goes up to $ 262,500 in our highest cost US region. Your recruiting contact can share more about the specific salary range for your preferred location during the hiring process. \nThis is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness.\nIn addition to your base salary, your total compensation will include a bonus of up to 45% and a generous retirement contribution that starts at 10%. Senior Directors/Executive Directors are also eligible for a Firm Performance Bonus.\nAll of our plans provide best in class coverage:\nZero dollar ($0) health insurance premiums for BCG employees, spouses, and children \nLow $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs \nDental coverage, including up to $5,000 in orthodontia benefits \nVision insurance with coverage for both glasses and contact lenses annually \nReimbursement for gym memberships and other fitness activities \nFully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan \nPaid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement \nGenerous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) \nPaid sick time on an as needed basis \nBoston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.\nBCG is an E - Verify Employer. Click here for more information on E-Verify.","description_format":"text","description_chars":8278,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Gym membership","Health insurance","Parental leave","Professional development","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Consulting & Digital Transformation","Custom Software Development","Analytics & BI Consulting"],"lifecycle":[{"event":"open","at":"2026-10-24T08:19:42Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.882,"p_room":0.9,"age_days":5,"expected_fill_days":10,"reasons":["conf:0","velocity","win:mid","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/bcg-x-information-security-senior-director-bcg-fed","json_url":"https://alion.io/job/bcg-x-information-security-senior-director-bcg-fed.json","meta":{"generated_at":"2026-10-30T12:04:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17385,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":655},"rest":"https://alion.io/mcp/rest/get_company?id=655"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbcg-x-information-security-senior-director-bcg-fed"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbcg-x-information-security-senior-director-bcg-fed"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbcg-x-information-security-senior-director-bcg-fed"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bcg-x-information-security-senior-director-bcg-fed\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbcg-x-information-security-senior-director-bcg-fed"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3201108}},{"tool":"search_jobs","arguments":{"company":"bcg.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3201108},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}