Job Requirements
Remote Washington, DC
Top Secret Polygraph not specified
Senior Level Career (10+ yrs experience)
$225,000 - $260,000
Job Description
Information Security Senior Director
Location: Washington, D.C. Metro Area (3x days week in-office)
Position Type: Enterprise Cybersecurity Senior Director
Clearance: Active Top Secret clearance required
The Information Security Senior Director serves as the primary executive authority on enterprise cybersecurity strategy, risk governance, and federal compliance for BCG Federal. Reporting regularly to the Government Security Committee (GSC) and executive leadership, the Information Security Senior Director holds direct authority to define and approve the federal IT security boundary, manage enterprise risk, and escalate unresolved security exposures. Operating as an executive peer alongside business and technology leaders, the Information Security Senior Director balances client mission enablement with rigorous defense compliance mandates.
The Information Security Senior Director leads a dedicated cyber organization of approximately 15 professionals and directs the strategic security interface between BCG Federal and BCG Global IT and Security. In this capacity, the Information Security Senior Director ensures our streamlined cloud environment—primarily Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines—remains properly isolated and compliant with Defense Counterintelligence and Security Agency (DCSA) standards, while safely leveraging global shared capabilities where permitted.
Key Responsibilities
• Executive Governance & GSC Advisory: Define enterprise security strategy, deliver regular security and compliance briefings to the Government Security Committee (GSC), and maintain risk governance aligned with federal missions and strategic corporate growth.
• Team Leadership & Cyber Operations: Direct an approximately 15-person cybersecurity organization across core functions, including security operations, compliance, cloud security architecture, IAM, and vulnerability management.
• Global Parent Alignment & Boundary Integrity: Partner with BCG Global CISO and IT leadership to maintain boundary isolation, data barriers, and access controls separating BCG Federal enclaves from commercial global infrastructure.
• Cloud Architecture & Enclave Protection: Oversee the security architecture and boundary controls for a focused cloud environment centered on Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines, ensuring strict protection of Controlled Unclassified Information (CUI) and export-controlled data.
• Federal Compliance & Audit Ownership: Own enterprise compliance for NIST SP 800-171, NIST SP 800-53, DFARS 252.204-7012, and CMMC Level 2, leading System Security Plan (SSP) maintenance, SPRS scoring, and C3PAO/federal audit readiness.
• Technology Controls Administration: Collaborate with Legal, the Facility Security Officer (FSO), and leadership to administer the Technology Control Plan (TCP) and ensure systems adhere to DCSA security requirements and governance obligations.
• Business Development & Mission Enablement: Partner with capture and client delivery teams to architect compliant, secure solutions for client enclaves and support proposal responses.
• AI Security Governance: Provide security and compliance oversight for vetting, deploying, and governing AI tools, LLMs, and emerging technologies within CUI-constrained environments.
• Supply Chain & Third-Party Risk (SCRM): Oversee vendor risk assessments, software supply chain security, and FedRAMP cloud service provider evaluations across subcontractors and external integrations.
Qualifications & Experience
• Experience: 7–10+ years of IT security and information assurance experience, including 2–4+ years operating within the Defense Industrial Base (DIB) or a directly comparable national security environment.
• People Leadership: 7+ years of demonstrated success directly managing multi-disciplinary IT teams, setting operational rhythms, and mentoring technical leads.
• Cloud & Infrastructure Mastery: Strong architectural knowledge of Microsoft GCC-High / Azure Government (Entra ID, Purview, Defender, Intune) and foundational AWS DevOps/IAM security baselines.
• Regulatory Expertise: In-depth understanding of NIST SP 800-171, DFARS 7012, CMMC Level 2, and DCSA oversight requirements.
• Education & Certifications: Bachelor’s degree in a relevant technical or government/business discipline. Recent coursework in AI and Cybersecurity a plus. Advanced degree and certifications preferred.
COMPENSATION: The anticipated starting base salary is $225,000–$260,000, with individual and firm performance bonuses and employer-funded retirement contributions. Additional benefits include family medical and dental coverage valued at approximately $39,000 annually.
Location: Washington, D.C. Metro Area (3x days week in-office)
Position Type: Enterprise Cybersecurity Senior Director
Clearance: Active Top Secret clearance required
The Information Security Senior Director serves as the primary executive authority on enterprise cybersecurity strategy, risk governance, and federal compliance for BCG Federal. Reporting regularly to the Government Security Committee (GSC) and executive leadership, the Information Security Senior Director holds direct authority to define and approve the federal IT security boundary, manage enterprise risk, and escalate unresolved security exposures. Operating as an executive peer alongside business and technology leaders, the Information Security Senior Director balances client mission enablement with rigorous defense compliance mandates.
The Information Security Senior Director leads a dedicated cyber organization of approximately 15 professionals and directs the strategic security interface between BCG Federal and BCG Global IT and Security. In this capacity, the Information Security Senior Director ensures our streamlined cloud environment—primarily Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines—remains properly isolated and compliant with Defense Counterintelligence and Security Agency (DCSA) standards, while safely leveraging global shared capabilities where permitted.
Key Responsibilities
• Executive Governance & GSC Advisory: Define enterprise security strategy, deliver regular security and compliance briefings to the Government Security Committee (GSC), and maintain risk governance aligned with federal missions and strategic corporate growth.
• Team Leadership & Cyber Operations: Direct an approximately 15-person cybersecurity organization across core functions, including security operations, compliance, cloud security architecture, IAM, and vulnerability management.
• Global Parent Alignment & Boundary Integrity: Partner with BCG Global CISO and IT leadership to maintain boundary isolation, data barriers, and access controls separating BCG Federal enclaves from commercial global infrastructure.
• Cloud Architecture & Enclave Protection: Oversee the security architecture and boundary controls for a focused cloud environment centered on Microsoft 365 GCC-High, Azure Government, and AWS DevOps pipelines, ensuring strict protection of Controlled Unclassified Information (CUI) and export-controlled data.
• Federal Compliance & Audit Ownership: Own enterprise compliance for NIST SP 800-171, NIST SP 800-53, DFARS 252.204-7012, and CMMC Level 2, leading System Security Plan (SSP) maintenance, SPRS scoring, and C3PAO/federal audit readiness.
• Technology Controls Administration: Collaborate with Legal, the Facility Security Officer (FSO), and leadership to administer the Technology Control Plan (TCP) and ensure systems adhere to DCSA security requirements and governance obligations.
• Business Development & Mission Enablement: Partner with capture and client delivery teams to architect compliant, secure solutions for client enclaves and support proposal responses.
• AI Security Governance: Provide security and compliance oversight for vetting, deploying, and governing AI tools, LLMs, and emerging technologies within CUI-constrained environments.
• Supply Chain & Third-Party Risk (SCRM): Oversee vendor risk assessments, software supply chain security, and FedRAMP cloud service provider evaluations across subcontractors and external integrations.
Qualifications & Experience
• Experience: 7–10+ years of IT security and information assurance experience, including 2–4+ years operating within the Defense Industrial Base (DIB) or a directly comparable national security environment.
• People Leadership: 7+ years of demonstrated success directly managing multi-disciplinary IT teams, setting operational rhythms, and mentoring technical leads.
• Cloud & Infrastructure Mastery: Strong architectural knowledge of Microsoft GCC-High / Azure Government (Entra ID, Purview, Defender, Intune) and foundational AWS DevOps/IAM security baselines.
• Regulatory Expertise: In-depth understanding of NIST SP 800-171, DFARS 7012, CMMC Level 2, and DCSA oversight requirements.
• Education & Certifications: Bachelor’s degree in a relevant technical or government/business discipline. Recent coursework in AI and Cybersecurity a plus. Advanced degree and certifications preferred.
COMPENSATION: The anticipated starting base salary is $225,000–$260,000, with individual and firm performance bonuses and employer-funded retirement contributions. Additional benefits include family medical and dental coverage valued at approximately $39,000 annually.
group id: 91164284