Security Consultant - Governance, Risk, Data Privacy

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

• Conduct enterprise risk assessments (IT, App, IoT/OT)
• Perform threat modeling & risk analysis (NIST / ISO 27005)
• Maintain risk register & track remediation
• Perform third-party/vendor risk assessments
• Implement data privacy frameworks (GDPR, DPDP Act 2023, ISO 27701)
• Conduct DPIA (Data Protection Impact Assessments)
• Define data classification, retention & protection policies
• Ensure PII/PHI compliance & audit readiness
• Secure IoT/OT devices, networks & communication protocols
• Perform IoT risk assessment & vulnerability analysis
• Implement device authentication, encryption & segmentation
• Conduct enterprise risk assessments (IT, IoT/OT environments)
• Perform threat modeling & risk analysis using NIST / IEC frameworks
• Maintain risk register, track mitigation & report risk posture
• Execute third-party/vendor risk assessments
• Support audits, compliance & reporting
• Prepare risk dashboards & management reports

• Develop policies, SOPs & security standards

Required education
Bachelor's Degree

Preferred education
Master's Degree

Required technical and professional expertise

• Understanding of privacy laws (GDPR, DPDP Act)
• Basic knowledge of IoT protocols (MQTT, CoAP, Modbus)

• Experience in risk assessment & governance

Preferred technical and professional experience

Certifications: CISSP, CISM, ISO 27001, CIPP/CDPSE

Years of Experience:
7-12