Les 45 meilleures offres d'emploi : en tant que compliance monitoring, , à Borehamwood (décembre 2025)

Global Cybersecurity Director - Security Operations

il y a 12 heures

Harrow

Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do Security Continuous Monitoring Oversight • Establish and lead BCG’s first enterprise-wide Cybersecurity Continuous Monitoring (CSCM) program, ensuring continuous visibility into system, endpoint, network, and cloud activity., • Define and implement governance models, including ownership of monitoring metrics (e.g., MTTD, MTTR, false positive rate, coverage completeness)., • Stand up monitoring processes and integrate telemetry sources across SIEM, EDR, identity, network, and cloud platforms., • Design and implement a continuous monitoring reference architecture, leveraging SIEM, SOAR, UEBA, and threat intelligence., • Establish enterprise logging standards covering log coverage, retention, encryption, access, and integrity requirements., • Drive automation of monitoring workflows and correlation logic to reduce dwell time and improve detection accuracy., • Build the CCM capability from the ground up, defining the operating model, reporting cadence, and engagement with SOC, risk, and compliance., • Develop and track KPIs, ensuring CCM effectiveness is measurable and communicated to senior stakeholders., • Prioritize creation of top 5–10 operational dashboards and reports that provide critical enterprise visibility., • Serve as the founding leader for the CCM function, creating the strategy, roadmap, and tactical build plan., • Partner with enterprise stakeholders across IT, Risk, and Security to align monitoring with business risk tolerance and resilience objectives., • Influence senior leaders by translating technical telemetry insights into business-relevant intelligence., • Build, inspire, and retain a high-performing team of analysts and engineers over time, leveraging both full-time staff and contractors., • Advise senior leadership (via SecOPS) on monitoring-driven insights, risks, and mitigation recommendations. What You'll Bring • Bachelor’s degree (or equivalent). Master’s preferred., • 10+ years in cybersecurity operations, with at least 5 years in security monitoring, SOC leadership, or equivalent detection & response functions., • Proven track record of building or maturing monitoring capabilities (SIEM, SOAR, telemetry pipelines, UEBA, threat intel integration)., • Knowledge of log ingestion, normalization, correlation, and enrichment processes., • Familiarity with leading monitoring technologies: Splunk, DataDog, Microsoft Defender, CrowdStrike Falcon, Azure/AWS/GCP telemetry, threat intelligence platforms., • Expertise in metrics-driven monitoring: defining, tracking, and reporting MTTD, MTTR, false positive rates, and coverage completeness., • Familiarity with frameworks like NIST CSF, MITRE ATT&CK, and ISO 27001, with experience applying these to monitoring., • Experience in threat hunting, anomaly detection, and behavioral analytics., • Strong leadership skills: able to recruit, mentor, and develop a high-performing team in a newly established function., • Executive presence: able to present complex monitoring data and risks to senior leadership in clear, concise business terms. Additional info COMPETENCIES: Director, Cybersecurity Continuous Monitoring Leads a critical security function with measurable business impact. Establishes foundational capabilities, manages delivery, and develops a growing team to support BCG’s enterprise security posture. Technical & Functional Expertise • Develops and executes the continuous monitoring strategy, aligned to enterprise security goals and SecOPS direction., • Demonstrates deep technical expertise in telemetry ingestion, SIEM/SOAR integration, log management, and threat intelligence enrichment., • Serves as a recognized expert in monitoring and detection, providing guidance to peers and influencing related security domains., • Codifies monitoring practices and standards into repeatable processes and playbooks, reducing reliance on ad hoc approaches., • Frames monitoring and detection challenges in business-relevant terms (risk, resilience, compliance)., • Uses data-driven methods (metrics such as MTTD, MTTR, false positives) to identify control gaps and inform improvements., • Translates complex monitoring outputs into actionable insights for stakeholders across IT, Risk, and Security., • Innovates in detection methodologies, leveraging behavioral analytics, anomaly detection, and adversary simulations., • Leads the build-out of the CCM function from the ground up, establishing governance, processes, and reporting., • Structures, plans, and executes monitoring programs and initiatives, balancing near-term needs with long-term maturity goals., • Delivers measurable outcomes (visibility, faster detection, reduced dwell time) that directly enhance business resilience., • Proactively manages resources, balancing full-time staff and contractors to deliver capability within deadlines., • Operates with integrity, safeguarding BCG and client data through responsible monitoring practices., • Promotes a culture of transparency, accountability, and data-driven decision-making in the team., • Demonstrates perseverance and adaptability in building a new function with high visibility and expectations., • Creates an inclusive working environment that values diverse technical and analytical perspectives., • Develops and delivers clear dashboards, reports, and executive communications on monitoring outputs., • Shapes perspectives by translating technical monitoring metrics into risk- and business-relevant insights., • Communicates effectively across technical and non-technical audiences, ensuring alignment with IT and business leaders., • Leads conversations in operational reviews, incident post-mortems, and governance forums., • Builds strong partnerships with SOC, Offensive Security, IT Operations, and Security Architecture teams., • Develops productive relationships across regions and business units to expand telemetry coverage., • Works collaboratively with compliance, risk, and audit to align monitoring with enterprise governance., • Anticipates and manages conflicts in data ownership, tool coverage, and priorities, resolving them constructively., • Defines the vision and purpose of the CCM function, instilling clarity and purpose for the team., • Coaches and mentors analysts, engineers, and contractors to expand monitoring expertise., • Provides stretch opportunities for team members to develop technical and leadership skills., • Balances empowerment and oversight — ensuring autonomy in monitoring activities while maintaining governance discipline., • Leads quality team meetings, defines clear objectives, and ensures alignment to SecOPS priorities., • Provides frequent developmental feedback, fostering a culture of continuous learning and improvement. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. (Click here )( for more information on E-Verify.

Senior Manager - BCG Vantage, Non-Financial Risk Management

il y a 12 heures

Elstree

Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do As a Senior Manager – BCG Vantage on our Topic Activation path within BCG's Risk & Compliance (R&C) Practice Area (PA), you will deliver against client and commercial priorities for Non-Financial Risk Management ('Topic'). Part of the role is acting in a consulting capacity to case teams and the remainder managing assets, IP, tools and team processes. You will grow and deploy a team of experts to directly support client case work, content development and business build initiatives. You will drive the Intellectual Property (IP)/content agenda for your topic, including the building of technical tools, with support from internal information technology colleagues. You will be responsible for the team’s performance across all key performance indicators (case billability, quality, content creation, etc.). You will also be the team lead for the Request Management process; a workflow process that facilitates case teams' support from the R&C Vantage team, ensuring that there is a clear internal team process for task assignment, completion and recording. You will also be responsible for reviewing requests on a periodic basis to identify trends and insights that will influence team strategy. You will be the lead in the team to track the development of all IP across the team, having a clear IP development strategy, that is effectively managed, executed and results In delivery of the tools on case work by the responsible team members. The R&C PA helps clients to manage key risks strategically, to advance organizational resilience and establish a profound risk culture, by defining and transforming R&C operating models. We cover a diverse set of topics across financial and non-financial risks, and assist in enabling clients' strategy through technical enablement with the help of our deep expertise in risk modelling, analytics and digitization. As a Senior Manager – BCG Vantage, you will engage with case teams & clients based on your individual expertise and demonstrate differentiated impact and value-add to BCG clients and case teams. As a Non-Financial Risk Management expert, you will be familiar with risks that can significantly impact on an organisation’s resilience, reputation, and long-term value. You will be comfortable with, and able to flex between, the following risks: Strategic Risk (risks related to flawed strategies, geo-politics, security or poor decision-making), Operational Risk (failures in internal processes, systems, or human errors, including Third-Party & Outsourcing Risk (dependency on vendors and suppliers)) and Compliance & Regulatory Risk (breaches of laws, regulations, or internal policies). You will understand how risk management and compliance functions are organisied and the management information approach to report on risks to risk committees. You will be experienced in organisational risk management processes, including risk assessment methodologies, risk appetite and risk tolerance setting, Compliance monitoring, Issues Management, Corrective Action Plans, Controls design / testing and Key Risk Indicators. You will be technologically savvy, able to interface easily with technical teams and be familiar and inquisitive with all things Artificial Intelligence (AI) as it relates to risk management, including the build and use of AI tools in second line of defence functions and also the risk management of AI. Familiarity using risk management technical tools ('risk tech' and 'reg tech') is desirable. Previous experience supporting heavily regulated corporates through a period of regulatory scrutiny or transformation would also be valuable. • Leading problem solving and solutioning for clients and driving towards pragmatic solutions tailored to the business context, • Leading development and commercialization of knowledge and assets e.g. tools, including non-financial risk management frameworks, target operating models, and cost optimisation scenarios, • Engaging and communicating with senior stakeholders, demonstrating expert presence and credibility, • Leading projects in a highly effective manner, mobilizing the team to deliver on business priorities and commercial impact, • Acting as a highly effective coach and mentor, guiding team members to achieve goals efficiently and effectively an ambassador for the team and role model for team members, • Working in an ever changing and complex environment, and comfortable with ambiguity and navigating a fast-paced environment, • Staying current In your topic and forward thinking with regards to market trends, • Working autonomously, understanding nuances and hierarchies in the operating environment, • Innovating, ideating and taking a proactive approach; applying yourself to the task at hand, even if the task is not necessarily a direct responsibility of the role - a great team player What You'll Bring • Bachelor's degree (or equivalent) required, (advanced credentials preferred); namely a senior qualification in risk management such as the Level 5 - International Certificate in Enterprise Risk Management, the Certified Risk Professional designation and / or a Fellow of a Risk Management Institute (not exhaustive), • 5+ years consulting experience in non-financial risk management In financial services and one other sector required; candidates with consulting experience preferred, • In lieu of consulting experience, 7+ years minimum industry experience required; 10-12+ years of industry experience strongly preferred, • Tenures of at least 2 years in a second line function (ideally Operational Risk) or a 1.5 Line function ('in business risk and controls') focused on operational risk processes. Risk management experience in a number of corporate entities, • Specialization in relevant non-financial risk management in banking and at least one other sector, • Experience in coordinating, collecting and managing workflow processes, • Fluency in English; added extra if fluent in any or all of these: German, Spanish Italian, • Exceptional attention to detail. You ensure superior quality work output of yourself and others. You build trust and establish a reputation for thoroughness and integrity. You deliver strong people leadership, to provide a best in class team experience, • Outstanding interpersonal and communication skills to interact with, and manage internal and external stakeholders, while working in a global collaborative team environment, • Solid commercial acumen Who You'll Work With As a Senior Manager – BCG Vantage on our Topic Activation path, you will collaborate with global topic leads and colleagues across BCG to bring expertise and capabilities to the service of our internal and external clients. Our team is made up of a diverse pool of BCG Vantage positions that allow us to pursue exciting, innovative BCG Vantage careers. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. (Click here )( for more information on E-Verify.

Offres compliance monitoring à BorehamwoodCréer des alertes d'emploi

Recherches d'emploi les plus tendance à Borehamwood

Lieux de travail compliance monitoring les plus tendance