Global Cyber Security Manager - Identity Management

About Boston Consulting Group :

Boston Consulting Group (BCG) is a global management consulting firm founded in 1963. BCG partners with business leaders and organizations to address complex challenges, drive digital transformation, strengthen business operations, and create sustainable growth.

BCG combines business strategy, technology, analytics, and innovation to deliver impactful solutions worldwide.

Job Summary :

Boston Consulting Group is seeking an experienced Global Cybersecurity Manager to lead enterprise-wide Identity Security and Risk Management initiatives.

The selected candidate will be responsible for analyzing identity and entitlement risks, managing privileged access exposure, evaluating security findings, and driving enterprise-level remediation programs.

This role focuses on converting identity visibility into measurable security risk reduction through effective Identity Security Posture Management (ISPM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM) practices.

You will collaborate with IAM, Cloud Security, Application Owners, Governance, Risk & Compliance (GRC), and senior leadership teams to strengthen BCG's global cybersecurity framework.

Key Responsibilities :

1. Identity Security & Risk Management :

- Lead the analysis and triage of identity and entitlement findings generated by ISPM systems.

- Evaluate human and non-human identities, including service accounts, bots, and workloads.

- Identify excessive privileges, dormant accounts, and unauthorized access.

- Assess identity-related risks based on business impact and security criticality.

- Identify false positives and prioritize genuine security threats.

- Evaluate identity exposure and potential attack paths.

2. Identity Governance & Privileged Access :

- Manage enterprise identity governance and access control initiatives.

- Review privileged access permissions and entitlement assignments.

- Identify toxic access combinations and excessive privileges.

- Establish appropriate role-based access control (RBAC) policies.

- Implement access restriction and privilege removal strategies.

- Improve identity lifecycle management and access review processes.

3. Security Risk Assessment & Remediation :

- Define remediation strategies for identified identity security risks.

- Coordinate remediation activities across IAM, Cloud Security, and application teams.

- Track security findings through resolution and closure.

- Validate remediation effectiveness and measurable risk reduction.

- Identify ownership gaps and improve access governance processes.

- Maintain remediation records and compliance evidence.

4. Security Framework & Policy Development :

- Develop and maintain enterprise identity security playbooks.

- Establish risk scoring methodologies and severity classifications.

- Define remediation SLAs and escalation procedures.

- Improve ISPM policies and detection quality.

- Develop governance standards for privileged and non-human identities.

- Strengthen cloud-to-data access security controls.

5. Executive Reporting & Stakeholder Management :

- Prepare executive-level cybersecurity reports and dashboards.

- Communicate identity security risks to CISO, CIO, CTO, and CRO stakeholders.

- Present risk trends, remediation progress, and security recommendations.

- Support internal security audits and compliance assessments.

- Provide strategic recommendations for identity risk reduction.

- Act as a senior subject matter expert for identity security management.

Required Qualifications :

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

- 7 - 9 years of experience in IAM, Identity Governance, Cloud Security, or Security Analytics.

- Strong expertise in enterprise identity and access management.

- Deep understanding of privileged access models and governance frameworks.

- Experience analyzing human and non-human identity risks.

- Strong knowledge of entitlement and role-based access risk analysis.

- Experience managing enterprise security remediation programs.

- Ability to independently make complex identity risk decisions.

- Excellent communication and executive stakeholder management skills.

- Experience developing and managing enterprise security frameworks and playbooks.

Technical Skills :

Mandatory : Identity & Access Management (IAM), Identity Governance (IGA), Identity Security Posture Management (ISPM), Privileged Access Management (PAM), Identity Risk Assessment, Entitlement Management, Security Analytics & Reporting.

Required : Role-Based Access Control (RBAC), Audit & Compliance.

Preferred : Active Directory, Microsoft Entra ID, Okta, AWS IAM, Azure IAM, Google Cloud IAM, Zero Trust Security.

Good to Have : ServiceNow, Jira.

Preferred Qualifications :

- Hands-on experience with Okta, Active Directory, and Microsoft Entra ID.

- Experience managing identity security across AWS, Azure, and GCP.

- Knowledge of IGA platforms and enterprise access review processes.

- Experience with ServiceNow or Jira for remediation tracking.

- Understanding of Zero Trust security architecture.

- Experience supporting identity-related audits and regulatory compliance.

- Ability to lead cross-functional cybersecurity initiatives.

- Experience presenting security risks and recommendations to executive leadership.

Key Performance Indicators (KPIs) :

- Reduction in unjustified privileged access across the enterprise.

- Improved ISPM findings triage and resolution time.

- Percentage of findings with documented business justification.

- Reduction in overall enterprise identity risk.

- Improved identity governance and programme maturity.

- Adoption of identity security playbooks across teams.

- Improved executive visibility into cybersecurity risks.

- Timely closure of high-priority security findings.

Why Join Boston Consulting Group?

- Work with a globally recognized consulting organization.

- Lead enterprise-wide cybersecurity transformation initiatives.

- Collaborate with global security and technology professionals.

- Gain exposure to advanced identity security technologies.

- Work on strategic IAM, cloud security, and risk management programs.

- Develop leadership expertise in global cybersecurity operations.

Equal Employment Opportunity :

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration without discrimination based on protected characteristics, in accordance with applicable laws.