**Introduction** A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. **Your role and responsibilities** As a Security Consultant, you specialize in implementing security solutions for clients and stakeholders while addressing security, regulatory, risk, and compliance issues. You maintain a current understanding of industry trends and hold multiple certifications in key cyber security areas. Your primary responsibilities will include: • Implement Security Solutions: Deliver security initiatives and projects that address client needs and ensure the achievement of business objectives. This involves collaborating with stakeholders to identify and mitigate risks. • Develop Mitigation Plans: Identify potential security risks and create effective mitigation plans to minimize their impact. This requires staying up-to-date with industry trends and leveraging expertise in key cyber security areas. • Define Security Strategies: Develop business-driven security strategies and roadmaps that align with client goals and objectives. This involves communicating effectively with stakeholders to ensure successful implementation. • Collaborate with Stakeholders: Work closely with clients and internal stakeholders to ensure the successful implementation of security initiatives and achievement of business objectives. • Maintain Industry Knowledge: Stay current with industry trends and maintain multiple certifications in key cyber security areas to provide expert guidance and advice. **Required technical and professional expertise** Tool Expertise: Experience in Safe Security (TPRM module) for vendor risk quantification and monitoring. Risk Management: Proven track record in third-party risk lifecycles: tiering, assessment, and automated risk scoring. Frameworks: Strong knowledge of ISO 27001, NIST CSF, and NIST 800-53 applied to supply chains. Compliance: Expertise in PCI-DSS, GDPR, and SOX within third-party environments. Implementation: Experience in functional rollout of GRC/TPRM tools, including API integrations and dashboard configuration. Analysis: Ability to translate technical findings into financial risk impact (Cyber Risk Quantification). **Preferred technical and professional experience** Certifications: Safe Security Certified Professional, CRISC, CISM, or CISA. Technical: Experience with outside-in scanning tools and integrating Safe Security with Jira or ServiceNow. Data Skills: Proficiency in automating reports and risk heatmaps. Industry Experience: Background in Aviation or Financial sectors managing high-volume vendor portfolios. Soft Skills: Excellent executive communication to present "Safe Scores" and remediation plans to C-level stakeholders. IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.