Join Boston Consulting Group (BCG) as an IT Security Engineer Manager and play a pivotal role in safeguarding our digital collaboration experiences and protecting sensitive BCG and client data. This is an opportunity to contribute to a leading global management consulting firm, renowned for its pioneering work in business strategy and its commitment to driving transformative change through a blend of digital and human capabilities.

In this role, you will be instrumental in enhancing the security posture of our extensive Digital Collaboration product portfolio. You will collaborate closely with SaaS, Sustaining Engineering, and Solution Architecture teams to ensure the effective execution of our organization's security policies, operating within our central control plane management.

You will be responsible for designing, administering, and configuring robust collaboration security capabilities across both Microsoft 365 and non-Microsoft platforms. This includes implementing data lifecycle management, retention, and records management solutions, and applying defense-in-depth principles to all configurations and operational activities.

Your duties will involve creating and enhancing technical solutions to address defined use cases and emerging requirements, alongside executing vulnerability management and event detection across existing BCG solutions. You will partner with our Secure Data squad to refine Data Loss Prevention capabilities and policy effectiveness, and identify opportunities for automating and streamlining security analysis, response, and policy configuration.

Furthermore, you will serve as an escalation point for critical issues, collaborate with Security Architecture on an enterprise-scale, automation-first approach to data labeling and classification, and troubleshoot Purview and broader security suite issues. You will also design, monitor, and respond to service health needs, and maintain comprehensive documentation and runbooks, providing support to the broader BCG Digital Collaboration team as required.

We are seeking candidates with a solid understanding of security controls frameworks and operational excellence procedures. A strong knowledge of the security and compliance product market is essential. Prior experience implementing and administering Microsoft Purview and/or Defender is highly valued.

Proficiency in enterprise collaboration platforms, including Microsoft 365 and Google Workspace, messaging, whiteboarding, and virtual conferencing tools, is required. You should possess proven experience in solving complex problems with simple, effective solutions and have a deep understanding of security concepts and data flow within collaboration tools, including protecting data at rest and in transit.

Experience working within complex, multi-vendor enterprise organizations is crucial, along with the ability to help disparate platforms operate effectively and identify capability gaps. Prior knowledge of GenAI tool security and governance is strongly preferred. Working knowledge of scripting (e.g., PowerShell), workflow automation (e.g., Power Automate), and API consumption (e.g., Microsoft Graph) is advantageous. Demonstrated C2 English proficiency is also required.