Technical Consultant: Risk & Compliance

At IBM, work is more than a job - it's a calling:To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk. Your Role and Responsibilities

Experience in Internal Control, General Computer and Application Control Audit background.

Knowledge and experience in various Information security standards / regulations / best practices (ISO-27001, COBIT, PCI-DSS, GDPR, HIPAA, SOC2, etc.

Knowledge of efficient way to protect the system, networks, software, data and information systems against security threats.

Experience collaborating with a team of security experts in a diverse set of security topics including, but not limited to, security architecture, financial controls and regulatory compliance, identity and access management, data loss prevention and privacy.

Required Technical and Professional Expertise

Good understanding of, and experience with Information Risk Management, IT Security and Compliance and Security Controls and Audit.

Understanding of internal and external IT security standards, SOX, PCI, SOC2/1, ISO27001 standards and relevant legal compliance aspects

Good understanding of cloud security requirements and third-party control assurance.

Ability to interface with different groups (Third parties, Business and IT) internal and external to IT (security) and to network globally across Group businesses, as well as with external groups.

Preferred Technical and Professional Expertise

Knowledge of Data Security Standards:PCI DSS, Privacy Principles

Driving Platform / Application security and compliance

Ability to foresee and identify mitigation strategies for Risks & Analytical and problem solving skills