Security Consultant - Security Strategy, Risk & Compliance Services

About the Role

Embark on a career path with IBM Consulting, known for fostering enduring client partnerships and collaborative work worldwide. The role involves engagement with leading industry players to influence their hybrid cloud and AI trajectories. Backed by strategic partners, advanced IBM and Red Hat technology, you will have the resources necessary to inspire impactful changes and accelerate client success. The culture prioritizes professional growth, empathy, and values your distinct expertise.

Key Responsibilities

Assist IBM's Cyber Strategy & Risk team by contributing to cybersecurity strategy design, risk assessment, and governance/compliance management. Support activities include conducting research, preparing documentation, performing analyses, and helping create deliverables suitable for clients. Specific tasks encompass:

• Contributing to the development of cybersecurity strategies, operational models, and maturity enhancement plans.
• Researching cybersecurity trends, emerging threats, regulatory mandates, and industry best practices.
• Benchmarking organizational capabilities against established standards such as NIST CSF, ISO 27001, and CIS Controls.
• Performing risk assessments focusing on threats, vulnerabilities, business impact, and control deficiencies.
• Documenting risk registers, remediation plans, and tracking risk treatment activities.
• Analyzing risks related to business processes, critical assets, third-party vendors, and technologies.
• Preparing risk management dashboards and executive reports.
• Reviewing policies, standards, and procedures for compliance with frameworks like ISO 27001, NIST, PCI DSS, and Qatar NIA.
• Collecting audit evidence and mapping controls to regulatory requirements.
• Supporting project tasks such as workshop preparation, meeting documentation, action item tracking, maintaining project status updates, and quality assurance of deliverables.

Candidate Eligibility and Qualifications

This position is exclusively open to Qatari Nationals.

Required Qualifications

• Currently enrolled in or recently graduated from a degree program related to Cybersecurity, Information Technology, Computer Science, Information Systems, Business, Risk Management, or similar disciplines.
• Keen interest in cybersecurity governance, risk management, compliance, strategy, and consultancy.
• Solid foundational understanding of cybersecurity principles including threat identification, vulnerability management, control implementation, identity management, incident response, data protection, and security awareness.
• Strong analytical mindset with effective research and documentation capabilities.
• Proficiency in Microsoft Office applications such as PowerPoint, Word, and Excel.
• Ability to work autonomously and collaboratively within a team.
• Fluent English communication skills; proficiency in Arabic considered advantageous.

Preferred Experience

• Familiarity with security frameworks such as NIST CSF, ISO 27001, CIS Controls, and Qatar NIA regulations.
• Arabic language skills.