Cybersecurity Manager - Cloud Security

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

You will join BCG's Security Operations team within Information Security and Risk Management, focusing on Attack Surface Management. In this role, you will help protect BCG's global cloud environment by assessing security risks across AWS, Azure, and Google Cloud. You will independently lead complex cloud security assessments, working with senior security and engineering leaders to establish risk-based remediation priorities and strengthen BCG's cloud security posture.

You will apply your hands-on cloud security expertise to investigate vulnerabilities and misconfigurations, evaluate their technical and business impact, and translate findings into actionable recommendations. Working closely with engineering and security teams, you will guide risk assessment discussions, monitor remediation progress, and validate outcomes. You will also lead defined improvements to cloud security assessment processes, monitoring capabilities, and automation, helping BCG identify and manage emerging risks more effectively.

You will:

• Independently own complex assessments of cloud security findings, vulnerabilities, and misconfigurations using cloud-native and cloud security posture management tools.
• Evaluate security risks by analyzing exposure, exploitability, access permissions, affected assets, and potential business impact to inform prioritization.
• Develop evidence-based risk assessments and recommend remediation priorities, working with senior security and engineering leaders to align on risk treatment decisions.
• Investigate cloud security issues, identify root causes, and partner with engineering teams to develop practical, sustainable remediation recommendations.
• Coordinate with cloud engineering, platform engineering, and security architecture teams to track remediation progress, assess residual risks, and validate resolution.
• Communicate complex security findings and recommendations to technical teams and senior leaders, enabling informed decisions and clear accountability.
• Lead defined initiatives to improve cloud security assessment processes, risk prioritization, monitoring, controls, and automation, addressing recurring risks and strengthening operational effectiveness.
• Share technical expertise and practical guidance with colleagues, promoting consistent security practices, knowledge sharing, and effective cross-functional collaboration

What You'll Bring

• 6-8 years of information security experience, including substantial hands-on cloud security experience.
• Strong practical knowledge of security controls and configurations across AWS, Azure, or Google Cloud.
• Foundational knowledge of cloud security posture management tools, such as Wiz or Prisma Cloud.
• Ability to independently assess complex cloud vulnerabilities, misconfigurations, and associated security risks.
• Experience evaluating cloud architecture, identity and access management, and network security risks.
• Strong analytical judgment to prioritize vulnerabilities, recommend remediation actions, and validate resolution.
• Clear communication skills to explain technical risks and influence engineering decisions across teams.

Who You'll Work With

You will be part of BCG's Security Operations team within Information Security and Risk Management, specializing in Attack Surface Management. You will collaborate with colleagues across BCG's global cloud engineering, platform engineering, and security architecture teams to assess security risks, align remediation priorities, and validate outcomes. Working closely with security and engineering partners, you will contribute to cross-functional security initiatives that strengthen BCG's cloud security posture and support consistent, effective security practices across the organization.

Additional info

Preferred certifications are helpful but not required, including AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CCSP, or Certified Kubernetes Security Specialist.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.

BCG is an E - Verify Employer. Click here for more information on E-Verify.