Introduction
A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.
Your Role And Responsibilities
- Hands-on exposure to cyber maturity assessments, risk quantification, and regulatory readiness programs. Proven experience presenting to C-level executives, risk committees, or regulatory auditors.
- Understanding of designing, implementing, and managing security controls across multi-cloud environments (AWS, Azure, GCP) to ensure that cloud solutions are compliant with organizational security policies, regulatory requirements, and industry best practices.
- This role combines strong technical expertise in cloud-native security tools with hands-on experience in risk management, compliance, and security operations.
- Support clients in designing and executing cyber transformation programs, including:
- Target Operating Model (TOM) design
- Security architecture alignment
- Identity & Access Management governance
- Data protection and resilience initiatives
- Experience assessing, designing, implementing, and managing security controls that protect infrastructure, servers, networks, and endpoints across hybrid IT environments. This role requires a good understanding of endpoint protection, vulnerability management, patch governance, identity and privilege management, and network defense to enhance the organization's cyber resilience.
- The consultant will work closely with IT, SOC, and compliance teams to ensure that infrastructure and endpoint security controls are aligned with business objectives, regulatory standards, and global cybersecurity frameworks.
Required Technical And Professional Expertise
- 10 - 15 years of versatile experience in cybersecurity consulting, architecture, risk management, or governance advisory.
- Experience supporting clients in government (preferred) and / or regulated industries such as banking, insurance, or telecommunications.
- Proven and experience with Cloud Security Platforms.
- Hands-on experience integrating alerts into SIEM/SOAR tools.
- Familiar with cloud-native and hybrid environment architecture in AWS, Azure, or GCP
- Familiar with compliance frameworks: NIST CSF, CIS, GDPR, PCI DSS.
- Familiar with EDR/XDR platforms, vulnerability management programs, IAM and PAM solutions.
- Experienced with incident response, patch governance, and endpoint hardening