6+ years of practical experience in cybersecurity consulting or cybersecurity management (with teams of five persons or more) in a variety of sectors and contexts.
BS in cybersecurity, information systems, mathematics, natural sciences, business management, or similar degree.
Hands-on experience with, or extensive knowledge of some of the following:
* Developing cybersecurity strategies or policies.
* Quantifying and managing cybersecurity risk.
* Leading security assessments.
* Designing, transforming, implementing, and running cybersecurity programs.
* Developing security architectures.
* Integrating security into applications and systems.
* Implementing cloud security.
* Managing cybersecurity risk arising from third parties and the supply chain.
* Designing / implementing identity and access management.
* Developing and upskilling a cybersecurity workforce.
* Delivering cybersecurity culture change, awareness, and training.
* Performing continuous monitoring activities such as using SIEM tools, APT hunting, implementing UBA, etc.
* Designing / implementing vulnerability management, including conducting vulnerability assessments.
* Performing penetration testing, incident management, BCP, and/or DRP.
Broad knowledge of cybersecurity technologies throughout organizational and acquisition lifecycle.
Working knowledge of at least two different cybersecurity frameworks:
* NIST Cybersecurity Framework.
* C2M2
* NIST SP 800-53 and companion publications.
* ISO/IEC 27000 family of standards, etc.
* Cloud Security Alliance CCM.
GenAI tool fluency (e.g., demonstrated use of GenAI tools such as ChatGPT, Claude) and validation of responses.
Business-fluent written and spoken English language skills.
Willingness to travel around the globe to work with clients and BCG teams.