Global Cybersecurity Director – Data Loss Prevention

Overview

In this role, you lead BCG’s global Data Loss Prevention program, shaping its strategic direction and ensuring effective, consistent operation across the organization. You collaborate with technical, Incident Response, HR, Risk, and Legal teams to address data loss incidents and strengthen controls. You guide cross-functional stakeholders and own the program’s health, KPIs, and operating model, driving continuous improvements. The position offers a visible, impact-driven opportunity to influence cybersecurity posture within a top-tier consultancy.

Responsibilities

• Lead the ongoing operation and development of the global DLP program and related processes
• Drive DLP effectiveness by identifying gaps, risks, and opportunities to improve program operations
• Build and manage relationships with DLP technology owners to ensure capabilities meet program needs
• Oversee end-to-end DLP alerting and escalation, coordinating with Incident Response to route investigations appropriately
• Act as security partner to HR, Legal, and business portfolios on cybersecurity-related cases
• Establish cross-team escalation frameworks to resolve complex DLP issues and clarify responsibilities
• Monitor DLP process health and extract insights from incidents to support improvements
• Own continuous monitoring of DLP health and policy-aligned controls
• Define and report DLP KPIs and influence the DLP operating model with IT
• Provide global coordination and leadership across the DLP program, fostering collaboration across teams
• Build an engaging Lisbon office community to strengthen engagement within ISRM and with Risk and IT teams

Key requirements

• 8+ years of experience in data loss prevention, information security, or related field
• Strong understanding of DLP principles and risk management
• Experience leading complex initiatives across multiple teams without direct authority
• Sound judgment in assessing sensitive security issues and actions
• Strong communication skills across technical and non-technical audiences
• Ability to build trusted relationships across cybersecurity, HR, Legal, and business functions
• Working knowledge of enterprise DLP technologies, including Microsoft Purview, and CASB

• strong communication
• relationship-building
• cross-functional collaboration
• enterprise DLP technologies
• Microsoft Purview
• CASB

…