Security Architect Director

• Determining security requirements by evaluating business strategies and requirements, implementing information security standards, conducting system security and vulnerability analyses and risk assessments, recommending secure architecture aligned to business architecture, and identifying/driving remediation of integration issues.
• Researching and analyzing emerging technologies, designing, and advocating new technologies, architectures, and security products in collaboration with system and service owners.
• Providing knowledge of SDLC/application architecture as well as methodologies for the software and model development life cycle.
• Managing end to end delivery of projects with hands on involvement in the development and configuration of products.
• Maintaining security by ensuring compliance to standards, policies, and procedures
• Self-managing progress and status of tasks and deliverables on projects and escalating issues and risks timely.
• Interacting with stakeholders and possessing the ability to influence direction, articulate risks and sell secure solutions/roadmaps.
• Completing market assessments on vendor products, packages, and services; guiding tests and implementation of products solving enterprise information security requirements.
• Suggesting and implementing alternative security mitigations/compensating controls to allow for business to continue while protecting BCG's assets.
• Guiding the configuration, implementation, monitoring, and support for security software/systems that will help ensure compliance with regulatory, industry, and corporate policies and procedures.
• Understanding, as the subject matter expert of best practices and change management policies using Infrastructure-as-Code and CI/CD tools for all aspects of ML model deployment and service delivery.
• Updating job knowledge by tracking and understanding emerging security practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.
• Excellent communication (written and oral) and leadership skills

• Preferred certification in one or more Information Security relevant areas such as, Security Professional (CISSP), Cloud Security (CCSP, CCSK)
• Minimum of 8 years of information security experience, with a strong background in cloud native infrastructure, network security, security applications and technologies.
• Subject matter expert in security practices that include the full administration of security control systems, vulnerability identification and mitigation, best practices for securing/hardening, and risk analysis.
• Knowledge of secure software development lifecycle and practices such as threat modelling, security reviews, penetration tests, and security incident response.
• In-depth experience of vulnerabilities, intrusion detection systems, firewall management, network vulnerability analysis, cryptographic theory and practice, incident analysis and response, software testing and security assessment, malicious code and software exploitation techniques, continuous monitoring and event logging, cyber-crimes, computer forensics analysis and computer crime investigation.
• In-depth knowledge of security frameworks and standards, including NIST SP 800-171, NIST SP 800-53, CMMC, and other relevant federal guidelines.
• Experience with cloud security, including AWS, Azure, or Google Cloud Platform, with specific expertise in Azure Government Community Cloud (GCC) High environments.

Total compensation for this role includes base salary, annual discretionary performance bonus, contributions to BCG's Profit Sharing and Retirement Fund (PSRF), and a market leading benefits package described below.

Some local governments in the United States require job postings to include a reasonable estimate of base compensation. We expect your total annualized compensation to be approximately the following:

* In Washington D.C., the base salary is between $178,000- $228,000 (USD); placement within this range will vary based on experience and skill level

* In other locations, competitive pay is commensurate with the role and geography

* Annual discretionary performance bonus between 0-12%

* 5% Profit Sharing Retirement Fund (PSRF) contribution, increasing to 10% after two years of service. Contributions are vested immediately and there is no waiting period

All of our plans provide best in class coverage:

• Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children
• Low $5 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs
• Dental coverage, including up to $5,000 in orthodontia benefits
• Vision insurance with coverage for both glasses and contact lenses annually
• Reimbursement for gym memberships and other fitness activities
• Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan
• Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement
• Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month)
• Paid sick time on an as needed basis

*Employees, spouses, and children are covered at no cost. Employees share in the cost of domestic partner coverage.