Introduction
At IBM Infrastructure & Technology, we design and operate the systems that keep the world running. From high-resiliency mainframes and hybrid cloud platforms to networking, automation, and site reliability. Our teams ensure the performance, security, and scalability that clients and industries depend on every day. Working in Infrastructure & Technology means tackling complex challenges with curiosity and collaboration. You'll work with diverse technologies and colleagues worldwide to deliver resilient, future-ready solutions that power innovation. With continuous learning, career growth, and a supportive culture, IBM provides the opportunities to build expertise and shape the infrastructure that drives progress.
Your Role And Responsibilities
We are seeking a motivated professional to support our Security and Compliance initiatives. This role will involve contributing to activities that ensure our organization adheres to industry standards, regulations, and best practices related to security and compliance. The ideal candidate should have a foundational understanding of security concepts, regulatory requirements, and a willingness to learn.
The Scope Of Work Includes
- Stay up to date with relevant laws, regulations, and standards (e.g., CONMON, GDPR, HIPAA, SOC1/2, PCI-DSS).
- Collaborate with internal teams and stakeholders to support security and compliance activities.
Preferred Education
Master's Degree
Required Technical And Professional Expertise
- Bachelor's degree in Computer Science, Information Security, or a related field.
- 1–4 years of experience in a Security and Compliance role or similar.
- Basic understanding of security concepts, risk management, and compliance requirements.
- Willingness to learn and contribute to cloud security and compliance initiatives.
- Good communication, interpersonal, and organizational skills.
- Familiarity with basic tools used for tracking and reporting (e.g., Excel, Jira, etc.).
Preferred Technical And Professional Experience
- Understanding of security frameworks (ISO 27001, NIST, etc) and compliance standards such as CONMON, ISMAP, SOC1/SOC2, HIPAA, and PCI-DSS.
- Familiarity with best practices in areas such as access control, encryption, and identity management.
- Exposure to audits, assessments, or compliance-related activities.
- Basic knowledge of security tools and technologies.
