Security Consultant Cybersecurity Strategy & Risk (m/f/d)

IBM Frankfurt

Stellenbeschreibung:

Overview

Security Consultant Cybersecurity Strategy & Risk (m/f/d). In this role, you will work in one of IBM Consulting Client Innovation Centers (Delivery Centers), delivering deep technical and industry expertise to public and private sector clients around the world. Our delivery centers provide clients with locally based skills and technical expertise to drive innovation and adoption of new technology.

Responsibilities

Experience in Internal Control, General Computer and Application Control Audit background.
Knowledge and experience in various information security standards / regulations / best practices (ISO-27001, COBIT, PCI-DSS, GDPR, HIPAA, SOC2, etc.).
Knowledge of effective methods to protect systems, networks, software, data and information systems against security threats.
Experience collaborating with a team of security experts on topics including security architecture, financial controls and regulatory compliance, identity and access management, data loss prevention and privacy.

Education and Qualifications

Preferred Education: Bachelor\'s Degree
Required Technical and Professional Expertise: Good understanding of Information Risk Management, IT Security and Compliance and Security Controls and Audit.
Understanding of internal and external IT security standards, SOX, PCI, SOC2/1, ISO27001 standards and relevant legal compliance aspects.
Good understanding of cloud security requirements and third-party control assurance.
Ability to interface with different groups (Third parties, Business and IT) internal and external to IT security and to network globally across Group businesses, as well as with external groups.
Experience collaborating with a team of security experts in a diverse set of security topics including, but not limited to, security architecture, financial controls and regulatory compliance, identity and access management, data loss prevention and privacy.
German language (C1 level).

Preferred Technical and Professional Experience

Knowledge of Data Security Standards: PCI DSS, Privacy Principles.
Driving Platform / Application security and compliance.
Ability to foresee and identify mitigation strategies for Risks; analytical and problem-solving skills.