--- title: Global Cybersecurity Senior Manager Architecture description: Boston Consulting is hiring for the Global Cybersecurity Senior Manager Architecture role in Lisbon, Lisbon. See the full description and apply. type: job url: https://www.foundrole.com/jobs/global-cybersecurity-senior-manager-architecture-at-boston-consulting-01a1811e-527a-719b-b9f3-406bb276fb69 date: 2026-11-13T17:45:24Z og_description: Join Boston Consulting as Global Cybersecurity Senior Manager Architecture in Lisbon, Lisbon. Full-time, hybrid role. og_image: https://www.foundrole.com/og/2hufxo.png breadcrumbs: - label: Home url: https://www.foundrole.com/ - label: Search url: https://www.foundrole.com/jobs --- | | | |---|---| | **Company** | [Boston Consulting](https://www.foundrole.com/companies/boston-consulting-group?utm_source=ai_markdown) | | **Location** | Lisbon, Portugal (Hybrid) | | **Type** | Full Time | | **Posted** | Oct 26, 2026 | ## Is this job real? **Ghost job check:** A · Low risk. Probably a real opening. ## Visa sponsorship - **H-1B:** Boston Consulting sponsors H-1B visas. It filed 758 H-1B petitions (FY2026 Q1 – FY2026 Q4). - **E-Verify:** No E-Verify enrollment on record for Boston Consulting. ## Pay for similar jobs Most similar jobs pay €35,000 – €65,000 a year (median €52,000). ## Description Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do As the Infrastructure Security Architect – Secure Data, you will serve as the dedicated security architecture partner for BCG’s Secure Data Engineering Squad, owning the cyber defense governance and technical protection requirements for data security architecture covering data loss prevention, classification enforcement, encryption, and secrets management. The role operates under the shared accountability model between ISRM Security Architecture and Secure Infrastructure Engineering: ISRM defines how platforms are secured and governed through security standards and architecture strategy; Platform Engineering owns the physical and logical implementation, delivery, and operation of those platforms. You will ensure the Secure Data portfolio aligns with BCG’s Global Information Security Policy (GISP), the Cybersecurity Control Framework (CSF-10 (Data Protection)), the Security Architecture Reference Model, and the CISA Zero Trust Maturity Model (Data pillar), embedding security from design through delivery while preserving control integrity and audit defensibility. **Key Responsibilities** - Define and maintain data security architecture: data loss prevention (DLP), data classification and tagging enforcement, encryption, and data privacy governance interfaces. - Own architectural requirements for Microsoft Purview enforcement: sensitivity labeling, auto-labeling policy design, DLP policy architecture across endpoints, email, and cloud services. - Define data classification enforcement architecture in alignment with the Global Data Classification Policy and Global Data Protection Policy, ensuring controls scale with data sensitivity. - Own encryption and key management architecture requirements for infrastructure-managed data, including interfaces to secrets management and enterprise key management platforms including crypto-agility and post-quantum cryptography (PQC) migration readiness for infrastructure-managed data and key material. - Define secure data access patterns for infrastructure-managed data stores and application interfaces, preventing unauthorized access, exposure, or tampering. - Architect DLP coverage for emerging data egress channels, including AI-enabled tooling and agentic workflows, in coordination with Enterprise Security Architecture. - Author and maintain the security standards, reference architectures, and control requirements that govern the Secure Data domain, mapped to CSF-10 (Data Protection) and ZTMM maturity targets. - Conduct security architecture reviews for secure data initiatives; issue dispositions, conditions, and architectural decision records traceable to ISRM governance. - Contribute domain expertise to ZTMM maturity assessments, control gap analyses, and the security architecture roadmap. - Serve as the dedicated architecture counterpart to the Secure Data Engineering Squad, validating feasibility and effectiveness of security controls through implementation without assuming delivery ownership. - Define logging, telemetry, and monitoring requirements (CSF-12) for secure data services in partnership with Security Operations, which owns SIEM, detection engineering, and continuous monitoring. **You’re Good At** - Translating enterprise security standards into practical, implementable engineering requirements. - Holding architecture authority constructively: enabling delivery teams rather than blocking them, while keeping governance boundaries intact. - Communicating precisely across engineering squads, architecture peers, and senior security leadership. What You'll Bring - Bachelor’s degree in a relevant field or equivalent practical experience. - 6–10 years in security architecture, security engineering, or infrastructure security with demonstrated architecture responsibility. - Experience operating in large, audit-sensitive, or regulated enterprise environments with formal governance and exception processes. - Strong understanding of zero trust architecture (NIST SP 800-207, CISA ZTMM), enterprise control frameworks, and hybrid cloud environments (Azure, AWS, GCP). - Deep hands-on architecture experience with Microsoft Purview (Information Protection, DLP), enterprise data classification programs, and encryption architecture. - Working knowledge of key management and secrets management platforms (e.g., HashiCorp Vault, cloud-native KMS/HSM), BYOK patterns, and cryptographic standards lifecycle. - Familiarity with insider risk, data egress monitoring, and DLP enforcement across endpoint, network, and SaaS channels. **Preferred Qualifications** - Professional certifications such as CISSP, SABSA, or relevant cloud security certifications. Who You'll Work With You will join the Infrastructure Security Architecture team within Information Security Risk Management (ISRM), serving as the dedicated security architecture partner for BCG’s Secure Data Engineering Squad. In this role, you will own the governance and technical architecture requirements that protect data across loss prevention, classification enforcement, encryption, and secrets management. You will collaborate closely with engineering, cloud, identity, infrastructure, and security teams across BCG’s global technology organization to ensure data security controls are consistently designed, implemented, and governed. You will also partner with Security Operations, Risk Management, and architecture peers to advance Zero Trust Data pillar maturity and support enterprise-wide cybersecurity initiatives. Working within a highly collaborative, matrixed environment, you will influence technical direction, build alignment on architectural decisions, and help teams deliver secure, scalable solutions that balance business objectives, operational effectiveness, and risk management. Additional info At BCG, our people and relationships are at the heart of everything we do. We believe that in-person collaboration plays an important role in our culture, mentorship, and professional development. For this role, you will generally be expected to work from a BCG office or in person with clients on a regular basis (typically around 50% of working time), depending on business needs and in line with local policies and practices. We aim to provide a dynamic and collaborative environment that fosters connection and teamwork. #LI-CM7 Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. [Click here](https://careers.bcg.com/global/en/e-verify) for more information on E-Verify. ## Skills - IT Security Architecture - Dell EMC Data Domain - Enterprise Security - Infrastructure Security - Cloud Computing - Control Frameworks - Cyber Security - Amazon Web Services - Data Privacy - Cryptocurrency - Certified Information System Auditor (Cisa) - Encryption - Cloud-Native Computing - Detection Engineering - AWS Key Management Service (Kms) - Security Operations - HashiCorp Vault - Risk Management - Solution Architecture - Hybrid Cloud Computing - Policy Design - Certified Information Systems Security Professional - Microsoft Azure - Secrets Management - Data Protection - Quantum Cryptography - Loss Prevention - Security Controls - Insider Threat Detection - Hardware Security Modules (Hsm) - Security Engineering - Zero Trust Security - Auditing - Coordinating - Data Classification - Google Cloud Platform (Gcp) - Microsoft Purview - Leadership - Key Management - Agentic Workflows - Architecture Regulations - Software as a Service (SaaS) - Product Roadmaps - Continuous Monitoring - Cloud Security and Compliance - Telemetry - Technical Architecture - Data Engineering - Communication - SIEM - Post-Quantum Cryptography - Data Security - Databases - Governance - Data Loss Prevention ## Benefits - Professional Development ## Related - [More jobs at Boston Consulting](https://www.foundrole.com/companies/boston-consulting-group?utm_source=ai_markdown) - [Technology & Software jobs](https://www.foundrole.com/careers/technology-and-software?utm_source=ai_markdown)- [IT Manager jobs](https://www.foundrole.com/careers/technology-and-software/it-managers?utm_source=ai_markdown)- [Cybersecurity Manager jobs](https://www.foundrole.com/careers/technology-and-software/it-managers/cybersecurity-manager?utm_source=ai_markdown)- [Browse all companies](https://www.foundrole.com/companies?utm_source=ai_markdown) ## Explore this job market - [Lisbon, Portugal](https://www.foundrole.com/locations/pt/lisbon?utm_source=ai_markdown) — 4463 jobs - [Lisbon, Lisbon](https://www.foundrole.com/locations/pt/lisbon/lisbon?utm_source=ai_markdown) — 3383 jobs - [Strategic Management Services](https://www.foundrole.com/sectors/management-and-consulting/strategic-management-services?utm_source=ai_markdown) — 2604 jobs - [Boston Consulting](https://www.foundrole.com/companies/boston-consulting-group?utm_source=ai_markdown) — 496 jobs ## Related pages - [Lisbon, Portugal](https://www.foundrole.com/locations/pt/lisbon?utm_source=ai_markdown) — 4463 jobs - [Lisbon, Lisbon](https://www.foundrole.com/locations/pt/lisbon/lisbon?utm_source=ai_markdown) — 3383 jobs - [Strategic Management Services](https://www.foundrole.com/sectors/management-and-consulting/strategic-management-services?utm_source=ai_markdown) — 2604 jobs - [Boston Consulting](https://www.foundrole.com/companies/boston-consulting-group?utm_source=ai_markdown) — 496 jobs ## Browse - [Companies](https://www.foundrole.com/companies?utm_source=ai_markdown) - [Jobs by country](https://www.foundrole.com/locations?utm_source=ai_markdown) - [Jobs in the United States by state and city](https://www.foundrole.com/locations/us?utm_source=ai_markdown) - [H1B sponsors by location](https://www.foundrole.com/h1b-sponsors?utm_source=ai_markdown) - [H1B salaries](https://www.foundrole.com/h1b-salaries?utm_source=ai_markdown) - [Sectors and industries](https://www.foundrole.com/sectors?utm_source=ai_markdown) - [Jobs by career field](https://www.foundrole.com/careers?utm_source=ai_markdown) - [Latest jobs](https://www.foundrole.com/jobs/latest?utm_source=ai_markdown)