The Director leads enterprise readiness and audit defense across key federal frameworks; including ... YOU'RE GOOD AT You excel at leading complex federal cybersecurity and compliance programs by ...
The Director leads enterprise readiness and audit defense across key federal frameworks; including ... YOU'RE GOOD AT You excel at leading complex federal cybersecurity and compliance programs by ...
GA DOR - Cybersecurity Specialist 3
Atlanta, GA · On-site
$60.75/hr
Proactive Defense: · A mindset focused on proactive threat hunting and prevention rather than just ... cybersecurity tools, such as SIEM, EDR, and IDSRequired4Years Questions No.
Quick apply
GA DOR - Cybersecurity Specialist 3
Atlanta, GA · On-site
$60.75/hr
Proactive Defense: · A mindset focused on proactive threat hunting and prevention rather than just ... cybersecurity tools, such as SIEM, EDR, and IDSRequired4Years Questions No.
The Director leads enterprise readiness and audit defense across key federal frameworks; including ... YOU'RE GOOD AT You excel at leading complex federal cybersecurity and compliance programs by ...
The Director leads enterprise readiness and audit defense across key federal frameworks; including ... YOU'RE GOOD AT You excel at leading complex federal cybersecurity and compliance programs by ...
Help Desk Specialist
Forest Park, GA · On-site
A3T, a fast-growing firm, specializes in Defensive Cyber Security Services, Enterprise Information Technology (IT) Solutions and Mission Operations & Enterprise Enablement driven by customer ...
Quick apply
Help Desk Specialist
Forest Park, GA · On-site
A3T, a fast-growing firm, specializes in Defensive Cyber Security Services, Enterprise Information Technology (IT) Solutions and Mission Operations & Enterprise Enablement driven by customer ...
Help Desk Specialist
Forest Park, GA · On-site
A3T, a fast-growingfirm, specializes in Defensive Cyber Security Services, Enterprise Information Technology (IT) Solutions and Mission Operations & Enterprise Enablement driven by customer ...
Help Desk Specialist
Forest Park, GA · On-site
A3T, a fast-growingfirm, specializes in Defensive Cyber Security Services, Enterprise Information Technology (IT) Solutions and Mission Operations & Enterprise Enablement driven by customer ...
Collaborate with and aid the Cybersecurity Management Branch Chief to manage the DCMA Offensive and Defensive Cyber Operations programs. * Ensure the organization's strategic plan, mission, vision ...
Collaborate with and aid the Cybersecurity Management Branch Chief to manage the DCMA Offensive and Defensive Cyber Operations programs. * Ensure the organization's strategic plan, mission, vision ...
Experienced in cybersecurity incident response, endpoint security, SOC management, and Linux ... Solid understanding of core security principles such as defense in depth, least privilege, secure ...
Experienced in cybersecurity incident response, endpoint security, SOC management, and Linux ... Solid understanding of core security principles such as defense in depth, least privilege, secure ...
Experienced in cybersecurity incident response, endpoint security, SOC management, and Linux ... Solid understanding of core security principles such as defense in depth, least privilege, secure ...
Experienced in cybersecurity incident response, endpoint security, SOC management, and Linux ... Solid understanding of core security principles such as defense in depth, least privilege, secure ...
Experienced in cybersecurity incident response, endpoint security, SOC management, and Linux ... Solid understanding of core security principles such as defense in depth, least privilege, secure ...
Experienced in cybersecurity incident response, endpoint security, SOC management, and Linux ... Solid understanding of core security principles such as defense in depth, least privilege, secure ...
Training Instructor (Cyber)
Augusta, GA · On-site
$44K - $60K/yr
The Cybersecurity Instructor provides top-tier instructional services for the with the U.S. Army Senior Leader Development College's Cyber Network Defense (CND) programs. The ideal candidate will ...
Quick apply
Training Instructor (Cyber)
Augusta, GA · On-site
$44K - $60K/yr
The Cybersecurity Instructor provides top-tier instructional services for the with the U.S. Army Senior Leader Development College's Cyber Network Defense (CND) programs. The ideal candidate will ...
Cybersecurity challenges are different for every business in every industry. Leveraging our global ... We blend risk strategy, digital identity, cyber defense, application security, and managed service ...
Cybersecurity challenges are different for every business in every industry. Leveraging our global ... We blend risk strategy, digital identity, cyber defense, application security, and managed service ...
Cybersecurity challenges are different for every business in every industry. Leveraging our global ... We blend risk strategy, digital identity, cyber defense, application security, and managed service ...
Cybersecurity challenges are different for every business in every industry. Leveraging our global ... We blend risk strategy, digital identity, cyber defense, application security, and managed service ...
Collaborate with and aid the Cybersecurity Management Branch Chief to manage the DCMA Offensive and Defensive Cyber Operations programs. Ensure the organization's strategic plan, mission, vision and ...
Collaborate with and aid the Cybersecurity Management Branch Chief to manage the DCMA Offensive and Defensive Cyber Operations programs. Ensure the organization's strategic plan, mission, vision and ...
Cybersecurity Architect
Alpharetta, GA · On-site
$168K - $271K/yr
Job Title Cybersecurity Architect About your role: As a Global Enterprise Cybersecurity Architect ... Design, and Defense-in-Depth principles. * Translate business, technology, and regulatory ...
Cybersecurity Architect
Alpharetta, GA · On-site
$168K - $271K/yr
Job Title Cybersecurity Architect About your role: As a Global Enterprise Cybersecurity Architect ... Design, and Defense-in-Depth principles. * Translate business, technology, and regulatory ...
Senior Principal Cybersecurity Specialist
Warner Robins, GA · On-site
$100 - $130/hr
Job Title Senior Principal Cybersecurity Specialist Department MERC College/Division Mercer ... practices for proactive defense. * Contributes to the design, validation, and continuous ...
Senior Principal Cybersecurity Specialist
Warner Robins, GA · On-site
$100 - $130/hr
Job Title Senior Principal Cybersecurity Specialist Department MERC College/Division Mercer ... practices for proactive defense. * Contributes to the design, validation, and continuous ...
Senior Principal Cybersecurity Specialist Department: MERC College/Division: Mercer Engineering ... practices for proactive defense. * Contributes to the design, validation, and continuous ...
Senior Principal Cybersecurity Specialist Department: MERC College/Division: Mercer Engineering ... practices for proactive defense. * Contributes to the design, validation, and continuous ...
Information Technology Cybersecurity Specialist (Security / Systems Analysis)
Fort Eisenhower, GA · On-site
$63K/yr
Code, Title 10, as well as Department of Defense Instruction 1400.25. This position is located at ... Implementing approved security patches or system configuration updates to comply with cybersecurity ...
Information Technology Cybersecurity Specialist (Security / Systems Analysis)
Fort Eisenhower, GA · On-site
$63K/yr
Code, Title 10, as well as Department of Defense Instruction 1400.25. This position is located at ... Implementing approved security patches or system configuration updates to comply with cybersecurity ...
Cyber Course Instructor/Writer with Security Clearance
Fort Eisenhower, GA · On-site
$43K - $58K/yr
LEAD Endeavors is a defense intelligence and cyber security analysis and solutions company. Our solutions aid the nation's defense industry in creating offensive and defensive strategic planning in ...
Cyber Course Instructor/Writer with Security Clearance
Fort Eisenhower, GA · On-site
$43K - $58K/yr
LEAD Endeavors is a defense intelligence and cyber security analysis and solutions company. Our solutions aid the nation's defense industry in creating offensive and defensive strategic planning in ...
To qualify for a Supervisory Cybersecurity IT Specialist (Infosec), your resume and supporting ... Leading a cyber defense function responsible for protecting an enterprise network, which includes ...
To qualify for a Supervisory Cybersecurity IT Specialist (Infosec), your resume and supporting ... Leading a cyber defense function responsible for protecting an enterprise network, which includes ...
Cybersecurity Architect Advisor
Alpharetta, GA · On-site
$127K - $204K/yr
Job Title Cybersecurity Architect Advisor About your role: As a Global Enterprise Cybersecurity ... Design, and Defense-in-Depth principles. * Translate business, technology, and regulatory ...
Cybersecurity Architect Advisor
Alpharetta, GA · On-site
$127K - $204K/yr
Job Title Cybersecurity Architect Advisor About your role: As a Global Enterprise Cybersecurity ... Design, and Defense-in-Depth principles. * Translate business, technology, and regulatory ...
Defensive Cyber Security information
See Georgia salary details
$48.1K - $58K
1% of jobs
$58K - $67.9K
4% of jobs
$67.9K - $77.8K
5% of jobs
$77.8K - $87.7K
9% of jobs
$93.2K is the 25th percentile. Wages below this are outliers.
$87.7K - $97.6K
11% of jobs
$97.6K - $107.5K
10% of jobs
The median wage is $111.4K / yr.
$107.5K - $117.4K
28% of jobs
$123.2K is the 75th percentile. Wages above this are outliers.
$117.4K - $127.3K
14% of jobs
$127.3K - $137.3K
11% of jobs
$137.3K - $147.2K
4% of jobs
$147.2K - $157.1K
4% of jobs
$48.1K
$112.3K
$157.1K
How much do defensive cyber security jobs pay per year?
What are some common challenges faced by professionals in defensive cyber security roles?
Which defensive cyber security job is less stressful?
What is defensive cyber security?
How much do defensive cyber security professionals make?
What are the key skills and qualifications needed to thrive as a defensive cyber security professional?
What is the difference between Defensive Cyber Security vs Security Analyst?
| Aspect | Defensive Cyber Security | Security Analyst |
|---|---|---|
| Certifications | CompTIA Security+, CISSP, CEH | CompTIA Security+, CISSP, CEH |
| Work Environment | Security teams, cybersecurity firms, IT departments | Security teams, cybersecurity firms, IT departments |
| Employer & Industry | Any industry with IT infrastructure, government, finance, healthcare | Any industry with IT infrastructure, government, finance, healthcare |
Defensive Cyber Security focuses on protecting systems through firewalls, intrusion detection, and security protocols. Security Analysts monitor, analyze, and respond to security incidents. While both roles require similar certifications and work environments, Defensive Cyber Security emphasizes proactive defense strategies, whereas Security Analysts focus on incident response and analysis.

Full-time
Medical, Dental, Vision, Retirement, PTO
Posted 18 days ago
Boston Consulting Group rating
9.4
Based on 15 frontline employees who took The Breakroom Quiz
3rd of 72 rated business consultants
Job description
Locations: Atlanta | Boston
Who We Are
Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.
To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.
What You'll Do
BCG Federal operates within a federally regulated environment supporting consulting, cloud, software, data, and emerging AI technology capabilities. The Director, Federal Security Governance, Risk & Compliance (SGRC) serves as the senior accountable lead for the SGRC pillar. This role drives the strategy, risk governance, regulatory compliance, certification readiness, and control maturity agenda across all BCG Federal offerings.
The Director leads enterprise readiness and audit defense across key federal frameworks; including CMMC Level 2, NIST SP 800-171/53, FedRAMP and DFARS. Working closely with Security Architecture, the Director translates complex regulatory requirements into policy and control objectives, establishing the governance framework while Architecture designs the technical controls and secure cloud baselines.
Furthermore, this role pioneers Federal AI Governance, establishing guardrails, risk assessment protocols, and approval pathways for Generative AI and machine learning tools deployed across federal boundaries.
YOU'RE GOOD AT
You excel at leading complex federal cybersecurity and compliance programs by combining technical GRC expertise, executive communication, organizational change management, and trusted stakeholder relationships.
YOUR DUTIES WILL INCLUDE
- Lead the Federal GRC pillar strategy, roadmap, operating model, governance rhythm, reporting structure, and control maturity agenda across BCG Federal.
- Direct enterprise compliance initiatives supporting DFARS, CMMC Level 2, NIST 800-171/, FedRAMP, AI governance, cloud security, and related federal cybersecurity requirements.
- Partner closely with Security Architecture to align policies with technical engineering; defining what control outcomes are required while Architecture designs how technical controls and baselines are configured.
- Own organizational readiness for federal assessments and certifications, including assessment scoping, SSP development, evidence preparation, stakeholder preparation, audit defense, C3PAO engagement, and executive reporting.
- Establish and mature Federal AI Governance, including risk methodologies, safety frameworks (e.g., NIST AI RMF), boundary protections, and approval pathways for secure adoption of Generative AI and LLMs.
- Own the federal risk register governance model, including risk identification, severity assessment, mitigation planning, exception management, escalation, and reporting.
- Lead cybersecurity review of federal contracts, RFPs, client opportunities, software approvals, cloud service reviews, and third-party vendor risk management to support secure technology adoption.
- Lead organizational change management for federal cybersecurity and compliance initiatives, including stakeholder alignment, communications, training, readiness tracking, and sustainment of new governance processes.
- Oversee continuous monitoring (CONMON) governance, evidence traceability, recurring review cadences, POA&M tracking, and management reporting.
- Define and deliver executive-level metrics, dashboards, QBR content, risk reporting, compliance status updates, and decision-ready materials for leadership.
- Lead, mentor, onboard, and develop GRC personnel while improving team operating rhythms, accountability, prioritization, and delivery quality.
What You'll Bring
- 10+ years of experience in cybersecurity, information security, GRC, audit, compliance, risk management, or technology governance environments.
- Demonstrated experience leading federal cybersecurity compliance programs (preferably supporting CMMC Level 2, NIST 800-171/53, FedRAMP) in consulting, cloud, SaaS, or federal contracting environments.
- Direct experience leading or materially supporting external assessments, regulatory inquiries, audit readiness efforts, C3PAO assessments, evidence preparation, and audit defense.
- Proven track record establishing AI Security Governance, evaluating machine learning/GenAI security risks, and applying federal AI risk management frameworks.
- Proven ability to partner with Security Architecture, DevSecOps, and IT engineering teams to translate complex legal and federal requirements into practical operating baselines.
- Strong organizational change management experience, including leading cross-functional process adoption, stakeholder readiness, communications, training, and sustainment of new operating models.
- Excellent written and verbal communication skills, including experience developing executive briefings, policies, audit materials, and management-level reporting.
- Ability to obtain and maintain a U.S. Government Secret Clearance where required.
Additional info
*** For US locations only ***
In the US, we have a compensation transparency approach.
Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below.
- The base salary range for this role begins at $176,000.00 in our lowest cost US region and goes up to $199,830.00 in our highest cost US region. Your recruiting contact can share more about the specific salary range for your preferred location during the hiring process.
This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness.
In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years.
All of our plans provide best in class coverage:
Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children
Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs
Dental coverage, including up to $5,000 in orthodontia benefits
Vision insurance with coverage for both glasses and contact lenses annually
Reimbursement for gym memberships and other fitness activities
Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan
Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement
Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month)
Paid sick time on an as needed basis
Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws.
BCG is an E - Verify Employer. Click here for more information on E-Verify.
What Boston Consulting Group employees say
Pay
Benefits
Hours and flexibility
Workplace
Get the full story on Breakroom
About Boston Consulting Group
Sourced by ZipRecruiter
Industry
Business management consulting
Company size
10,000+ Employees
Headquarters location
Boston, MA, US
Year founded
1963