Senior AI Tech Consultant, Cybersecurity

Lead context: Boston Consulting Group (BCG Platinion) seeks a Senior AI Tech Consultant focused on cybersecurity end-to-end responsibility for client modules across transformation, assessments, and operational resilience.

Responsibilities

• Take end-to-end ownership of an individual client “module” within BCG engagements and build specialized capability to solve client problems.
• Apply generalist consulting skills to address strategic cybersecurity and digital risk questions across a range of topics.
• Tackle strategic, organizational, managerial, and operational client issues using advanced cybersecurity methodologies, tools, and techniques.
• Translate how technology enables business execution, then decompose and shape the cybersecurity implications of that relationship.
• Assess cybersecurity requirements, current tools, and best practices, then produce tailored recommendations for the client’s environment and circumstances.
• Communicate complex and technical concepts clearly through concise, business value-centric written output.
• Implement cybersecurity transformation initiatives and culture change programs.
• Run cybersecurity assessments including gap analysis and roadmap development across organizations, product development, and cloud security.
• Develop cybersecurity strategies, policies, processes, and procedures to protect clients’ internal infrastructure and customers.
• Build cybersecurity business strategies for technology product vendors aligned to the organization’s overall business strategy and aimed at increasing revenue and profits.
• Work with leadership teams, including facilitating board and senior management cybersecurity awareness workshops.
• Embed product security and DevSecOps practices into software development lifecycles, system designs, and IT architectures.
• Use cyber risk quantification to reduce uncertainty and support executive decision making.
• Create and facilitate table-top exercises.
• Deliver operational resilience through incident response, business continuity, and disaster recovery planning.
• Align and onboard teams to implement new cybersecurity process and toolsets, guiding organizations through complex change and optimization of practices.
• Establish and maintain relationships across cross-functional stakeholder groups and existing security teams.

Requirements

• 4+ years of practical experience in cybersecurity consulting or cybersecurity management (including teams of five persons or more) across multiple sectors and contexts.
• BS in cybersecurity, information systems, mathematics, natural sciences, business management, or a similar degree.
• Hands-on experience or extensive knowledge in areas including:
  • Developing cybersecurity strategies or policies.
  • Quantifying and managing cybersecurity risk.
  • Designing, transforming, implementing, and running cybersecurity programs.
  • Assessing cybersecurity risks in AI platforms.
  • Integrating security into applications and systems.
  • Implementing cloud security.
  • Managing cybersecurity risk from third parties and the supply chain.
  • Designing and implementing identity and access management.
  • Developing and upskilling a cybersecurity workforce.
  • Delivering cybersecurity culture change, awareness, and training.
  • Designing continuous monitoring programs using SIEM tools (including SIEM-based monitoring, APT hunting, and implementing UBA).
  • Designing and implementing vulnerability management, including conducting vulnerability assessments.
  • Performing penetration testing, incident management, BCP, and/or DRP.
• Broad knowledge of cybersecurity technologies across the organizational and acquisition lifecycle.
• Working knowledge of at least two cybersecurity frameworks including:
  • NIST Cybersecurity Framework
  • C2M2
  • NIST SP 800-53 and companion publications
  • ISO/IEC 27000 family of standards (etc.)
  • Cloud Security Alliance CCM
• GenAI tool fluency (e.g., demonstrated use of ChatGPT and Claude) with validation of responses.
• Team-oriented attitude; strong communication and presentation skills; outstanding analytical and conceptual skills.
• Results-oriented mindset; confidence and persuasiveness.
• Business-fluent written and spoken English.
• Willingness to travel globally to client sites and BCG teams; travel requirements depend on client needs and project nature.

Technologies

• ChatGPT, Claude
• SIEM tools, APT hunting, UBA
• NIST Cybersecurity Framework, C2M2, NIST SP 800-53
• ISO/IEC 27000 family of standards
• Cloud Security Alliance CCM

Location

• Houston, TX (onsite)

Salary and U.S. Compensation

• $150,000 USD base compensation per year.
• Annual discretionary performance bonus.
• BCG Profit Sharing and Retirement Fund (PSRF) contribution.

Benefits

• $0 health insurance premiums for BCG employees, spouses, and children.
• $10 copays for trips to the doctor, urgent care visits, and prescriptions for generic drugs.
• Dental coverage, including up to $5,000 USD in orthodontia benefits.
• Vision insurance covering glasses and contact lenses annually.
• Gym membership and other fitness activity reimbursement.
• Fully vested retirement contributions made annually (whether you contribute or not).
• Generous paid time off: vacation, holidays, and annual office closure between Christmas and New Years.
• Paid Parental Leave and other family benefits including elective egg freezing, surrogacy, and adoption reimbursement.
• Coverage for employees, spouses, and children at no cost; employees share in domestic partner coverage cost.

Other Locations

• Atlanta, Austin, Boston, Brooklyn, Chicago, Dallas, Denver, Detroit, Durham, Houston, Miami, Minneapolis, Nashville, New York, Philadelphia, Pittsburgh, Summit, Washington

What We Offer

• Opportunity to work across disciplines and BCG, combining strategic thinking with hands-on application.
• Work alongside passionate problem-solvers delivering innovative and valuable digital solutions in a supportive environment.