Global Cybersecurity Manager - Governance and Compliance (Cybersecurity)

Company

hirify.global is a global management consulting firm delivering business strategy, technology, design, and transformation services.

What you will do

• Support strategic clients and prospects with information security due diligence, questionnaires, RFPs, audits, calls, and workshops.
• Explain BCG’s security controls, certifications, policies, and risk management practices to client stakeholders.
• Maintain and improve Client Assurance Services tools, templates, automation initiatives, knowledge repositories, and response libraries.
• Collaborate with Information Security, Legal, Risk, Compliance, and client-facing teams to provide accurate and consistent responses.
• Support assurance activities related to ISO 27001, SOC 2, GDPR, NIST CSF, and regional data protection regulations.
• Identify opportunities to improve response quality, operational efficiency, documentation, and knowledge management.

Requirements

• 5–8 years of experience in information security, cybersecurity, risk management, compliance, or a related field.
• Experience with client-facing security assurance, audits, compliance activities, due diligence requests, questionnaires, or RFPs.
• Strong understanding of ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations.
• Ability to communicate technical security concepts clearly to non-technical audiences and collaborate across global, matrixed organizations.
• Fluent written and spoken English and German are required.
• Experience in professional services, financial services, technology, or consulting is preferred.

Nice to have

• CISSP, CISM, CISA, Security+, or ISO 27001 Lead Auditor/Implementer certification.

Culture & Benefits

• Work with global teams across information security, legal, risk, compliance, and client-facing functions.
• Support strategic client relationships at the intersection of information security, client trust, and business development.
• Some international travel may be required for client engagements.