In this role you strengthen BCG’s Enterprise Risk Management program with a focus on IT Services, Cyber, Data and AI risk. You will translate complex tech and risk topics into clear insights for senior stakeholders and drive cross-functional risk initiatives across the firm. You’ll build dashboards, KRIs, and risk reporting to support proactive decision-making in a global, dynamic environment. This is an opportunity to shape digital risk governance and foster a risk-aware culture at scale.
Responsibilities
Strengthen and evolve the ERM program focusing on IT Services & Cyber Risk and Data & AI Risk
Partner with Digital, IT, Legal, Compliance, Privacy, and other functions to drive cross-functional risk initiatives
Produce executive-ready presentations, dashboards, and reports with key risk insights and recommendations
Monitor risk information to identify emerging IT, cyber, data, and AI risks and support mitigation planning
Develop KRIs and risk sensing metrics and executive reporting for proactive risk management
Escalate material risk issues through the enterprise risk governance framework
Coordinate enterprise risk register reviews and integrate findings into governance processes
Enable consistent risk reporting, governance, and communications across functions
Lead cross-functional projects to advance strategic risk initiatives and improve ERM processes
Contribute to ongoing enhancement of ERM methodologies and governance practices
Key requirements
7+ years in enterprise risk management, technology risk, cyber risk, IT services risk, or related field
Experience assessing IT services, cyber, data, and AI risks in global organizations
Knowledge of COSO ERM, ISO 31000, NIST CSF, ISO 27001, NIST AI RMF, and KRIs
Excellent written and verbal communication to translate technical risk for senior stakeholders
Proven ability to drive risk process adoption and influence without direct authority
Understanding of legal and regulatory cybersecurity, data privacy, and AI considerations
Experience with PowerPoint, Power BI or Tableau, and GRC platforms; collaboration tools like Teams, Slack, Trello
Experience using AI/LLM tools for risk analysis and content development
Bachelor’s degree in business, risk management, economics, computer science, information systems, cybersecurity, or related field
Advanced degree or certifications (CRISC, CISA, CISM, CRM) are a plus
Ability to work across time zones and travel as needed
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.