Who We Are
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.
To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.
What You’ll Do

Security Continuous Monitoring Oversight

• Establish and lead BCG’s first enterprise-wide Cybersecurity Continuous Monitoring (CSCM) program, ensuring continuous visibility into system, endpoint, network, and cloud activity.
• Define and implement governance models, including ownership of monitoring metrics (e.g., MTTD, MTTR, false positive rate, coverage completeness).
• Stand up monitoring processes and integrate telemetry sources across SIEM, EDR, identity, network, and cloud platforms.
• Ensure monitoring outputs are actionable, enriching detection and response activities and informing risk and compliance stakeholders.

Technical Architecture & Integration

• Design and implement a continuous monitoring reference architecture, leveraging SIEM, SOAR, UEBA, and threat intelligence.
• Establish enterprise logging standards covering log coverage, retention, encryption, access, and integrity requirements.
• Drive automation of monitoring workflows and correlation logic to reduce dwell time and improve detection accuracy.
• Collaborate with threat intelligence teams to ensure real-time enrichment of event data and alignment with MITRE ATT&CK adversary tactics.

Program & Capability Development

• Build the CCM capability from the ground up, defining the operating model, reporting cadence, and engagement with SOC, risk, and compliance.
• Develop and track KPIs, ensuring CCM effectiveness is measurable and communicated to senior stakeholders.
• Prioritize creation of top 5–10 operational dashboards and reports that provide critical enterprise visibility.
• Mature the function from initial operational capability (M1) toward advanced maturity, embedding continuous improvement cycles.

• Operates with integrity, safeguarding BCG and client data through responsible monitoring practices.
• Promotes a culture of transparency, accountability, and data-driven decision-making in the team.
• Demonstrates perseverance and adaptability in building a new function with high visibility and expectations.
• Creates an inclusive working environment that values diverse technical and analytical perspectives.
• Leads by example, modeling sustainable workload practices even under incident-driven pressure