Boston Consulting Group (BCG) is a premier global management consulting firm, pioneering business strategy since 1963. We empower clients with transformative solutions that blend digital and human capabilities, driving competitive advantage and bottom-line impact. Our diverse, international teams bring deep industry expertise and unique perspectives to spark significant organizational change.

BCG operates through a collaborative model, integrating leading-edge consulting with technology, design, and corporate ventures. We foster an environment where organizations can achieve total transformation, enabling growth and building lasting competitive advantages.

This role focuses on safeguarding digital collaboration experiences and protecting BCG and client data within our central control plane. Key responsibilities include designing, administering, and configuring security for Microsoft 365 and other platforms. You will implement data lifecycle management, retention, and records management capabilities, applying defense-in-depth principles.

Further duties involve creating and enhancing technical solutions for defined use cases and emerging needs. You will execute vulnerability management and event detection, tune Data Loss Prevention capabilities, and identify opportunities for automation in security analysis and policy configuration. This position also serves as an escalation point for critical issues and collaborates on defining and executing an enterprise-scale, automation-first approach to data labeling and classification.

Additional responsibilities include troubleshooting Purview and broader security suite issues, designing and monitoring service health, and maintaining essential documentation. You will also support other areas of the BCG Digital Collaboration team as needed, ensuring a comprehensive approach to security.

Ideal candidates possess a strong understanding of security controls frameworks and operational excellence procedures. A solid grasp of the security and compliance product market is essential. Familiarity with scripting languages like PowerShell, workflow automation tools such as Power Automate, and API consumption via Microsoft Graph is highly preferred.

Prior experience with implementing and administering Microsoft Purview and/or Defender is required. Candidates should have a robust knowledge of enterprise collaboration platforms, including Microsoft 365 and Google Workspace, messaging, whiteboarding, and virtual conferencing tools. Experience in complex, multi-vendor enterprise environments is crucial, along with proven problem-solving skills and an understanding of data flow security across networks.

Prior knowledge of GenAI tool security and governance is strongly preferred. Fluency in English, demonstrated by a C2 proficiency level (e.g., IELTS 7+, TOEFL iBT 94+), is mandatory. You should also exhibit creative thinking, a security and compliance mindset, strong analytical skills, and the ability to work effectively both independently and within a dispersed team.