56 минут назад
Global Cybersecurity Manager (Client Assurance)
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Global Cybersecurity Manager (Client Assurance) (Cybersecurity/Information Security): Supporting global client due diligence through security questionnaires, RFPs, audits, and assurance discussions with an accent on security frameworks, compliance evidence, and cross-functional stakeholder collaboration. Focus on translating technical security controls into business-relevant responses, improving assurance tools and knowledge repositories, and maintaining consistent documentation across client engagements.
Company
is a global management consulting firm delivering business strategy, technology, design, and transformation services.
What you will do
- Support clients and prospects with information security due diligence, questionnaires, RFPs, audits, calls, and workshops.
- Explain BCG’s security controls, certifications, policies, and risk management practices clearly to non-technical audiences.
- Maintain and improve Client Assurance Services tools, templates, automation initiatives, and knowledge repositories.
- Collaborate with Information Security, Legal, Risk, Compliance, and client-facing teams to provide accurate and compliant responses.
- Support assurance activities related to ISO 27001, SOC 2, GDPR, NIST CSF, and regional data protection requirements.
- Improve response quality, operational efficiency, documentation, and knowledge management across client engagements.
Requirements
- 5–8 years of experience in information security, cybersecurity, risk management, compliance, or a related field.
- Experience with client-facing security assurance, audits, compliance activities, advisory work, questionnaires, due diligence requests, or RFPs.
- Strong understanding of ISO 27001, SOC 2, NIST CSF, GDPR, and relevant regional data protection regulations.
- Ability to communicate technical security concepts clearly to non-technical audiences and collaborate across global, matrixed organizations.
- Fluent written and spoken English required.
- Experience in professional services, financial services, technology, or consulting is preferred.
Nice to have
- CISSP, CISM, CISA, Security+, or ISO 27001 Lead Auditor/Implementer certification.
- Fluency in another European language.
Culture & Benefits
- Work with global teams across information security, legal, risk, compliance, and client-facing functions.
- Contribute to strategic client relationships and initiatives focused on client trust and data protection.
- Operate in a collaborative, matrixed professional services environment.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →