Cybersecurity Analyst

Introduction

In this role, you’ll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

A career in IBM Consulting embraces long-term relationships and close collaboration with clients across the globe.

You’ll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including IBM Software and Red Hat.

Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you’ll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in groundbreaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

Your role and responsibilities

1. Conduct risk assessments and identify potential compliance issues in the organization's IT systems and infrastructure.
2. Develop and implement controls and mitigation strategies to address identified risks.
3. Enable compliance with relevant laws, regulations, and industry standards, such as HIPAA, PCI-DSS, and NIST.
4. Collaborate with cross-functional teams to implement security measures and enable compliance.
5. Develop and maintain compliance documentation, including policies, procedures, and audit reports.
6. Perform audits and vulnerability assessments to identify areas for improvement.
7. Stay up to date with emerging threats and regulatory changes, and recommend updates to security controls and compliance procedures.
8. Provide training and guidance to employees on security best practices and compliance requirements.

Required technical and professional expertise

1. Performs audit evidence collection, sampling, review.
2. Performs control operating effectiveness assessments.
3. Reviews relevant policies, standards, procedures and practices for compliance, control design strength, and effectiveness.
4. Reviews and understands relevant technical (e.g. architecture diagrams, data flow diagrams, engineering change tickets etc.) documentation as needed.
5. May perform the following types of specific assessments:
6. Critical System Review
7. IT Cyber Routine Work Sample Review
8. Engineering Modification Review
9. Vulnerability Management Review
10. IT Cyber Training Program Health
11. Critical Asset Work Order Review
12. Produces quality final written reports as requested.