BCG Platinion is seeking a Senior AI Tech Consultant (Cybersecurity) to take end-to-end responsibility for a module within client engagements and apply advanced cybersecurity methodologies to strategic cybersecurity and digital risk questions. Based in Nashville, TN on an onsite basis, this role combines transformation work, assessments, and operational resilience to help clients address organizational and operational challenges.

As a senior member of the team, you will support cybersecurity transformation and culture change initiatives while helping leadership teams make better decisions through risk quantification and clear, business-focused communication. The position also involves embedding security into modern software development and technology architectures across the client lifecycle.

Key Responsibilities

Own an individual module within BCG client engagements and develop specialized knowledge to solve client problems.
Apply generalist consulting skills to strategic cybersecurity and digital risk topics across multiple client contexts.
Use advanced cybersecurity methodologies, tools, and techniques to address strategic, organizational, managerial, and operational issues for clients.
Decompose how technology supports business strategy and translate that relationship into cybersecurity implications.
Analyze cybersecurity requirements, current tools, and best practices, then convert findings into tailored recommendations for a client’s environment.
Communicate complex technical concepts in written form with a concise, business value focus.
Implement cybersecurity transformation and culture change initiatives.
Conduct cybersecurity assessments, including gap analysis and roadmap development, across areas such as organizations, product development, and cloud security.
Develop cybersecurity strategies, policies, processes, and procedures to protect internal infrastructure and customer needs.
Create cybersecurity business strategies for technology product vendors that align with overall organizational business strategy and support revenue and profit goals.
Work with leadership teams, including facilitating board and senior management cybersecurity awareness workshops.
Embed product security and DevSecOps practices into software development lifecycles, system designs, and IT architectures.
Use cyber risk quantification to reduce uncertainty around cyber risk and improve executive decision making.
Create and facilitate table-top exercises.
Deliver operational resilience through incident response, business continuity, and disaster recovery planning.

Requirements

4+ years of practical experience in cybersecurity consulting or cybersecurity management with teams of five persons or more, across a variety of sectors and contexts.
A BS in cybersecurity, information systems, mathematics, natural sciences, business management, or a similar degree.
Hands-on experience, or extensive knowledge, developing cybersecurity strategies or policies.
Hands-on experience, or extensive knowledge, quantifying and managing cybersecurity risk.
Hands-on experience, or extensive knowledge, designing, transforming, implementing, and running cybersecurity programs.
Hands-on experience, or extensive knowledge, assessing cybersecurity risks in AI platforms.
Hands-on experience, or extensive knowledge, integrating security into applications and systems.
Hands-on experience, or extensive knowledge, implementing cloud security.
Hands-on experience, or extensive knowledge, managing third-party and supply chain cybersecurity risk.
Hands-on experience, or extensive knowledge, designing and implementing identity and access management.
Hands-on experience, or extensive knowledge, developing and upskilling a cybersecurity workforce.
Hands-on experience, or extensive knowledge, delivering cybersecurity culture change, awareness, and training.
Hands-on experience, or extensive knowledge, designing continuous monitoring programs that incorporate SIEM tools, APT hunting, and UBA.
Hands-on experience, or extensive knowledge, with vulnerability management, including conducting vulnerability assessments.
Hands-on experience, or extensive knowledge, performing penetration testing, incident management, BCP, and/or DRP.
Broad knowledge of cybersecurity technologies across the organizational and acquisition lifecycle.
Working knowledge of at least two frameworks or standards: NIST Cybersecurity Framework; C2M2; NIST SP 800-53 and companion publications; ISO/IEC 27000 family of standards; Cloud Security Alliance CCM.
Team-oriented attitude; strong communication and presentation skills; outstanding analytical and conceptual skills.
Results-oriented mindset, confidence, and persuasiveness.
GenAI tool fluency (e.g., demonstrated use of ChatGPT and Claude) and validation of responses.
Business-fluent written and spoken English skills.
Willingness to travel globally to work with clients and BCG teams, with significant travel to client sites at times.

Technologies

DevSecOps
SIEM tools
APT hunting
UBA
NIST Cybersecurity Framework
C2M2
NIST SP 800-53
ISO/IEC 27000 family of standards
Cloud Security Alliance CCM
GenAI tools (e.g., ChatGPT, Claude)
Identity and access management
AI platforms

Benefits

Zero-dollar ($0) health insurance premiums for BCG employees, spouses, and children.
$10 (USD) copays for trips to the doctor, urgent care visits, and prescriptions for generic drugs.
Dental coverage including up to $5,000 (USD) in orthodontia benefits.
Vision insurance for glasses and contact lenses annually.
Reimbursement for gym memberships and other fitness activities.
Fully vested retirement contributions made annually, whether you contribute or not.
Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years.
Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement.
Employees, spouses, and children covered at no cost; employees share in the cost of domestic partner coverage.
Annual discretionary performance bonus.
BCG Profit Sharing and Retirement Fund (PSRF) contribution.
Market leading benefits package (described in the posting).

Compensation and Location

Salary: USD 150,000 per year (base compensation for U.S. applicants).
Location: Nashville, TN (onsite).
Additional U.S. locations listed: Atlanta, Austin, Boston, Brooklyn, Chicago, Dallas, Denver, Detroit, Durham, Houston, Miami, Minneapolis, New York, Philadelphia, Pittsburgh, Summit, Washington.

Additional U.S. Applicant Details

Eligible for an annual discretionary performance bonus.
Eligible for BCG’s Profit Sharing and Retirement Fund (PSRF) contribution.

Senior AI Tech Consultant, Cybersecurity