WHAT YOU'LL DO
We are seeking a strong candidate to fill the Global IT Enterprise Security Architect - Expert Director position as we work to build a Gen AI Assistant that will transform the way BCG works.
You will be working in a Security Engineering, Architecture, and Automation capacity across BCG's
global organization to drive and support improvements based on new and emerging trends. The
successful candidate will be responsible for setting strategies for the future of BCG's security,
with a focus on Gen AI products. As a Global IT Enterprise Security Architect, you will be
expected to design and develop solutions that meet the security needs of our company, while
ensuring that the solutions are scalable, efficient, and cost-effective
You will:Address security challenges related to Generative AI, including access and encryption for storage solutions like Vector DB and Graph DB.Work closely with Enterprise and Security Architecture teams to understand their security requirements and develop solutions that meet their needsPerform security design and application architecture reviews using risk assessment and threat modeling (e.g., STRIDE-LM) in enterprise environments.Develop and provide secure design patterns and secure coding advice across multiple languages and platforms, including APIs, hybrid multi-region cloud environments, and containers.Implement Secure Software Development Life Cycle (SDLC) and DevSecOps methodologies and tooling.Ensure compliance with regulations (e.g., GDPR, HIPAA) and industry standards (e.g., NIST SSDF, OWASP Top 10, SAMM, ASVS).Use vulnerability scanning tools and penetration testing methodologies to identify and mitigate application weaknesses.Implement and manage security technologies, such as Identity and Access Management (IAM) solutions and secrets management systems.Collaborate with solution architects and engineering teams to embed security recommendations at the architectural level.Manage projects, including technical planning, design requirements, vendor evaluations, and reporting.Adapt to dynamic environments with changing schedules and priorities.Conduct security reviews of network designs and implementationsWork in Agile framework Prepare and review monthly status reports and statistics YOU'RE GOOD AT Securing global networks and compute environments with state-of-the-art security technology including Next-Gen Firewalls, Cloud Native Firewalls, IPS, DDOS, ACLs, and other hardware preferably with automation tools and practices to ensure consistency and repeatabilityEngineering and implementation of Zero Trust remote access solutions and other 3rd Party connectivity solutionsMaintaining knowledge base and 'as built' documentation for all network security servicesChanging and maintaining connectivity for Cloud Computing environmentsSuccessfully interfacing and connecting with skilled technologists and non-technical stakeholdersWorking in an Agile environment leveraging strong work management, organizational and planning skillsNegotiating and consensus building between stakeholders where competing priorities exist, providing well-honed influencing skillsEffectively handling difficult and stressful situations with poise, tact and patience, while demonstrating a sense of urgency YOU BRING (EXPERIENCE & QUALIFICATIONS) BA degree in computer science, Cybersecurity, or similar field preferred10+ years design/implementation/consulting experience of distributed applications and security/compliance related work5+ years of software development and AI/ML or related technology domain10+ years of security/compliance related workMinimum 7+ years of network security engineering experience with large scale implementations distributed globallyProven experience in network and Cloud security architecture, design and best practices to support a globally distributed environment across multiple platforms such as AWS, Azure, and GCPExperience addressing security challenges in multi-tenant data pipelinesExperience with Cloud Native technologies, such as Kubernetes, Docker, and TerraformStrong understanding of networking protocols, including TCP/IP, HTTP/HTTPS, and DNSExperience with NextGen and Cloud Native Firewalls, and intrusion detection/prevention systemsExcellent communication and collaboration skillsAbility to work in a fast-paced environment and manage multiple projects simultaneouslyStrong organizational, written communication, problem-solving, and analytical skillsExpertise in cloud security for platforms like AWS, Azure, and Google Cloud.Knowledge of encryption technologies and their implementation.Ability to conduct thorough security risk assessments and develop mitigation strategies.Experience with IAM, including SSO, access control, and user provisioning.Familiarity with vulnerability scanning tools and interpreting results.CISSP and other security certifications preferred YOU'LL WORK WITH
You will be part of a global team located across Europe, Asia, and the Americas, working in a highly
collaborative environment with like-minded colleagues. If you are a passionate Global IT Enterprise Security Architect with experience in cloud security and a desire to innovate and lead the way in AI security, then we encourage you to apply for this exciting opportunity
