Global Cybersecurity Director

Locations: Lisbon | London

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.

To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

You will take a leading role in BCG's global Data Loss Prevention (DLP) program, helping ensure that the processes designed to identify, assess, and respond to potential data loss are effective and operate consistently across the organization. You will provide leadership across the DLP program while working closely with the technical teams responsible for the underlying tools, capabilities, and policies.

This is a highly collaborative role with end-to-end accountability for the strategic direction and effectiveness of the DLP program, rather than for day-to-day case handling. You will connect cybersecurity processes with the teams responsible for investigating and resolving potential data loss events, and ensure that there is coordination across technical, Incident Response, HR, Risk, and Legal teams, bringing clarity to complex cases and helping ensure that issues are handled effectively and appropriately.

• Lead the ongoing operation and development of BCG's global DLP program and associated processes.
• Drive effective DLP processes, identifying gaps, risks, and opportunities to strengthen how the program operates.
• Build strong relationships with technical teams that own and operate DLP technologies, ensuring technical capabilities support program requirements.
• Provide oversight of the DLP alert and escalation process end-to-end, partnering with Incident Response to ensure alerts are triaged effectively and route to the right investigation and escalation paths.
• Act as the security partner to HR, Legal, and business portfolios on cases with a cybersecurity dimension requiring follow-up beyond the standard response process.
• Establish and maintain the cross-team framework and escalation pathways used to resolve complex DLP issues, clarifying responsibilities so that cases are consistently driven toward appropriate outcomes.
• Monitor the effectiveness of DLP processes and use insights from incidents and operational experience to inform improvements.
• Own ongoing monitoring of the health and compliance of the DLP program, ensuring controls remain effective and aligned to policy.
• Define and report on DLP program KPIs, and act as a key stakeholder — alongside IT in shaping the DLP operating model.
• Provide global coordination and leadership across the DLP program, influencing teams and outcomes without relying on formal reporting lines.
• Build and foster a vibrant office community in Lisbon by leading initiatives that strengthen engagement, collaboration, and connection within ISRM and across Risk and IT teams, creating an inclusive and supportive employee experience.

What You'll Bring

• 8+ years of relevant experience in data loss prevention, information security, or a related field.
• Strong understanding of DLP principles, processes, and approaches to managing information security risk.
• Experience leading complex initiatives and driving outcomes across multiple teams without direct authority.
• Sound judgment when assessing sensitive or complex security issues and determining appropriate actions.
• Strong communication skills, with the ability to engage effectively across technical and non-technical teams.
• Ability to build trusted relationships across cybersecurity, HR, Legal, and other business functions.
• Strong working knowledge of enterprise DLP technologies, including platforms such as Microsoft Purview, and network-layer DLP controls (e.g., CASB).

Who You'll Work With

You'll be part of BCG's Cybersecurity team within ISRM, working with colleagues globally to strengthen how we prevent and respond to potential data loss. You'll partner closely with Incident Response and the technical teams responsible for DLP technologies — including DLP engineering and SecOps — setting security priorities and providing oversight without duplicating their engineering responsibilities, as well as colleagues across Privacy, Risk, HR, and Legal. Success in the role will depend on building trusted relationships across these teams, connecting technical and business perspectives, and helping drive coordinated responses to complex and sensitive issues.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.