Security Consultant | GRC

Introduction

In this role, you’ll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Your role and responsibilities

As a Security Consultant, you’ll provide excellent technical guidance to customers transforming their environment to increase their cryptography assets into a Post Quantum Computing higher level of compliance. You will provide best practices on secure foundational to cloud and on-premises development practices implementations, automated provisioning of infrastructure and applications, cloud-ready application architectures, and more. You’ll provide prescriptive guidance in ensuring customers receive the best of what we can offer and ensure that customers have the best experience in migrating, building, modernizing, and maintaining applications in a multi-cloud environment. As a Security Consultant, you will be a key advisor for IBM’s clients, analyzing business requirements to design and implement the best security solutions for their needs. You will have high visibility at the most senior levels of customer organizations, including frequent interaction with CIOs, CISOs, CTOs, their staff, and senior leadership.

Required technical and professional expertise

1. Experience in GRC - Governance, Risk and Compliance consulting, cybersecurity risk management, audit, Sarbanes-Oxley or a related field;
2. Advanced understanding of GRC principles, cybersecurity frameworks, and regulatory compliance requirements;
3. Strong knowledge of governance, risk management frameworks (e.g., COSO, COBIT), and regulatory compliance requirements;
4. Familiarity with BCP methodologies, risk assessment techniques, and TPRM processes;
5. Experience in developing and delivering security awareness training programs and policy management frameworks;
6. Expertise with risk management methodologies, compliance tools, and audit processes;
7. Familiarity with GRC platforms (e.g., RSA Archer, OneTrust) and industry-specific regulatory standards (e.g., NIST, ISO 27001, GDPR, PCI-DSS) and regulations (e.g., GDPR, HIPAA, CCPA).

Preferred technical and professional experience

1. Certifications: CISM, CISA, CRISC, ISO 27001 Lead Auditor, CISSP, or equivalent GRC certifications preferred;
2. Fluent English, Spanish preferred.
3. Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Business, or a related field;