Global Platform Team Lead & Senior Director – Identity Security

Overview

In this role you lead the strategy, engineering and operational excellence of BCG’s global identity security program, spanning human and agentic AI identities. You drive modernisation of directory services, PAM and agentic identity frameworks to secure non-human workloads and AI agents. You’ll align identity security with digital transformation and product initiatives, while building observable, automated controls across a global team. This is a chance to shape security for enterprise AI at scale and influence BCG’s future identity posture.

Responsibilities

• Define and execute a unified Identity Security strategy spanning human and agentic AI identities
• Modernise enterprise identity infrastructure and move to a cloud-native, zero-trust fabric
• Publish and govern the Agentic Identity framework for non-human identities and automated workloads
• Align identity security with digital transformation, BCG X projects, and AI/ML platforms
• Establish global identity observability and telemetry for real-time risk visibility
• Oversee Directory Services strategy, including AD rationalisation and cloud-based providers
• Lead Privileged User Management design and operation across human and agentic identities
• Oversee IGA programs with RBAC, SoD and access lifecycle management
• Direct Secrets Management, DLP and observability to secure credentials across endpoints and AI outputs
• Ensure SRE-based operations with 24×7 support, and automate remediation and vulnerability management
• Ensure compliance with ISO 27001, NIST, SOC 2, GDPR and regulatory requirements
• Manage budget, vendor relationships and tooling portfolio for identity platforms
• Build and mentor a global, automation-first Identity Security team
• Promote cross-domain collaboration with ISRM, platform engineering and leadership

Key requirements

• 12+ years in identity security, IAM or related cybersecurity engineering disciplines
• 5+ years in a senior leadership role overseeing enterprise-scale identity platforms
• Deep expertise in identity architecture: directory services, PAM, IGA, secrets management
• Experience with identity modernisation including AD transformation, cloud migration and zero-trust adoption
• Understanding of non-human identity management (service accounts, API credentials, automated workloads)
• Knowledge of compliance frameworks (ISO 27001, NIST, SOC 2, GDPR)
• Strong leadership, communication and stakeholder management skills
• Ability to engage from engineering teams to executives

• leadership
• stakeholder management
• communication
• Azure AD / Entra ID
• CyberArk
• SailPoint IdentityNow

…