Security and Compliance Lead

Hybrid - Bangalore, IN

Professional, Scientific, and Technical Services

About the position

In a competitive talent market, high quality job posts and adverts are essential if we are to successfully attract talent into IBM. To ensure your Reqs' job post is the best it can be, please use the templates provided in your Job Post Builder tool, which you can access through this Link If using the tool for the first time, please ensure that you read the guidelines provided at the top of each of the resources pages.

Responsibilities

• Prepare comprehensive project documentation, including project charters, status reports, compliance assessments, timelines, and budgets for security and compliance initiatives.
• Coordinate cross-functional teams to ensure project milestones are met on time and within scope.
• Stay up to date with relevant laws, regulations, and standards (e.g., GDPR, HIPAA, SOC1/2, PCI-DSS).
• Communicate project status, risks, and issues to senior management and other stakeholders.
• Foster relationships with internal teams, external partners, and regulatory bodies.

Requirements

• Bachelor's degree in computer science, Information Security, or a related field.
• Minimum of 7 years of experience in a Security and Compliance relevant role or similar.
• Proven track record of managing complex projects in a regulated environment.
• Actively participate in the maintenance and development of the cloud security roadmap.
• Excellent communication, interpersonal, leadership and organizational skills.
• Proficient in project management tools and methodologies.

Nice-to-haves

• Master's degree in computer science, Information Security, or a related field.
• In-depth knowledge of security frameworks (ISO 27001, NIST, etc.) and compliance requirements, with specific experience in SOC1/SOC2, HIPAA and PCI-DSS.
• Familiarity with industry best practices in areas such as access control, encryption, and identity management.
• Conduct regular audits and assessments to ensure adherence to compliance standards.
• Experience with security tools and technologies.