Find your next role

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Your role and responsibilities

As a Security Consultant, you specialize in implementing security solutions for clients and stakeholders while addressing security, regulatory, risk, and compliance issues. You maintain a current understanding of industry trends and hold multiple certifications in key cyber security areas. Your primary responsibilities will include:

• Lead and manage information security and cybersecurity compliance programs across the organization.

• Plan and coordinate internal and external audits, ensuring ongoing compliance with applicable standards and regulations.

• Design, implement and maintain security frameworks and control environments, such as ISO 27001, NIST, SOC 2, PCI DSS, and other relevant standards.

• Develop, review, and oversee information security policies, procedures, and controls, ensuring alignment with regulatory requirements and industry best practices.

• Coordinate risk assessments, track remediation plans, and ensure timely mitigation of identified compliance gaps.

• Monitor changes in regulations, laws, and standards related to information security, privacy, and data protection at national and international levels.

• Act as a key liaison between technical, legal, audit, and business teams, facilitating effective collaboration and alignment.

• Communicate compliance status, risks, and recommendations clearly to executive leadership and key stakeholders.

Required education

Bachelor's Degree

Required technical and professional expertise

• 5+ years of experience in information security and cybersecurity compliance roles.

• Proven experience leading compliance programs, as well as internal and external audits.

• Strong knowledge of information security frameworks and standards, including ISO 27001, NIST, SOC 2, PCI DSS, or equivalent.

• Solid understanding of laws, regulations, and compliance requirements related to information security, privacy, and data protection at both local and international levels.

• Experience designing, updating, and overseeing security policies, procedures, and controls.

• Ability to manage risk assessments, remediation plans, and compliance gap mitigation.

• Strong experience working with technical, legal, and audit teams, as well as communicating effectively with executive leadership.

• Excellent skills in critical analysis, project management, documentation, problem-solving, and decision-making.

• Strong attention to detail, high level of accountability, and a proactive, risk-prevention mindset focused on governance.

Preferred technical and professional experience

• Professional certifications such as CISM, CISA, CRISC, or ISO 27001 Lead Implementer / Lead Auditor, or other related security and compliance certifications.

• Experience working in highly regulated industries (e.g., financial services) or in a senior role within a consulting firm.

• Knowledge of information security and cybersecurity regulatory frameworks applicable in Peru.