Who We AreBoston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact.
To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll DoYou will help reduce identity-based security risks across BCG by analyzing identity and entitlement data, identifying potential risks, and supporting practical remediation actions. Rather than focusing on traditional security operations center (SOC) alert monitoring, this role emphasizes identity intelligence, risk analysis, and continuous improvement of security practices. Working with colleagues across cybersecurity and technology teams, you will assess identity-related findings, recommend appropriate actions, and help track remediation progress. You will contribute to consistent processes and playbooks that strengthen the effectiveness of identity security operations.

• Analyze and triage identity and entitlement findings across human and non-human identities, including privileged accounts.
• Assess findings based on risk severity, business context, and potential impact, distinguishing meaningful risks from lower-priority findings.
• Identify identity-related risks, including excessive privileges, inappropriate access, and conflicting entitlements.
• Translate identity relationship and graph-based analysis into clear, actionable findings for technical and business teams.
• Recommend practical remediation actions, including access adjustments and privilege restrictions, seeking guidance when appropriate.
• Collaborate with IAM, cloud security, application owners, and governance, risk, and compliance teams to support remediation.
• Monitor remediation progress, follow up on outstanding actions, and help validate that identified risks have been reduced.
• Maintain and improve identity risk playbooks, escalation procedures, and severity classification guidelines.

What You'll Bring

• 2-4 years of relevant experience in identity and access management (IAM), identity governance with a focus on cloud identity and security analytics.
• Working knowledge of privileged access models, identity entitlements, and common access-related security risks.
• Ability to analyze identity relationships, identify potential risks, and communicate findings clearly.
• Experience assessing security findings and recommending practical remediation actions.
• Strong collaboration and communication skills across technical and business teams in a global environment.
• Familiarity with identity platforms such as Microsoft Entra ID, Active Directory, or Okta is preferred.
• Knowledge of identity and access management concepts within AWS, Azure, or Google Cloud is preferred.

Who You'll Work WithYou will work closely with colleagues across Security Operations, Identity and Access Management (IAM), Cloud Security, and Governance, Risk, and Compliance (GRC). You will collaborate with application owners and platform teams globally to understand identity-related risks, coordinate remediation activities, and monitor progress toward resolution. Through these partnerships, you will contribute to consistent security practices and help strengthen BCG's identity security posture.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.