Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

As a Global Information Security Manager / Global Client Assurance Services Manager, you will support BCG's strategic clients with information security due diligence activities. You will collaborate with internal teams to communicate BCG's security posture, policies, and practices to clients globally, contributing to the delivery of client assurance activities and the development of CAS tools and processes.

Responsibilities

Serve as a key contact for clients and prospects conducting information security assessments of BCG.
Respond to security questionnaires, RFPs, and audit requests.
Participate in client calls and workshops.
Provide clear explanations of BCG's security controls, certifications, and risk management practices.
Support the maintenance and continuous improvement of CAS tools, templates, knowledge repositories, and automation initiatives.
Partner closely with BCG's Information Security, Legal, Risk, Compliance, and client-facing teams.
Support clients in understanding BCG's compliance with relevant frameworks (e.g. ISO 27001, SOC 2, GDPR, NIST).
Help translate technical security concepts into business-relevant assurance responses.
Identify opportunities to enhance response quality, improve operational efficiency, and strengthen knowledge management.
Contribute to maintaining high-quality documentation, templates, and best practices.
Maintain and enhance the CAS knowledge base, standard response library, and supporting documentation.

Requirements

Minimum 5–8 years of experience in information security, cybersecurity, risk management, compliance, or a related field.
Experience supporting client-facing information security, assurance, audit, compliance, or advisory activities.
Strong understanding of information security frameworks and standards including ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations.
Experience responding to client security questionnaires, due diligence requests, audits, or RFPs.
Ability to communicate technical concepts clearly to non-technical audiences.
Strong communication, organization, and stakeholder management skills.
Ability to collaborate effectively across global and matrixed organizations.
Fluent written and spoken English and preferably another European Language are required.

Skills

Information Security
Cybersecurity
Risk Management
Compliance
Client Assurance
Information Security Due Diligence
Security Questionnaires
RFPs
Audit Requests
Security Controls
Certifications
Risk Management Practices
CAS Tools
Process Improvement
Knowledge Management
ISO 27001
SOC 2
GDPR
NIST
Communication
Organization
Stakeholder Management
Collaboration

Experience Level

5-8 years

Education Level

CISSP
CISM
CISA
Security+
ISO 27001 Lead Auditor/Implementer

About the Company

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities.
BCG was the pioneer in business strategy when it was founded in 1963.
Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.
To succeed, organizations must blend digital and human capabilities.
Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change.
BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose.
We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

Equal Opportunity

Boston Consulting Group is an Equal Opportunity Employer.
All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.
BCG is an E - Verify Employer.