Security Consultant-Exposure Management

Introduction

A career in IBM Consulting is rooted in long-standing client partnerships and day-to-day collaboration with teams around the world. You’ll work with leading organizations across industries, supporting their hybrid cloud and AI initiatives. Backed by strategic partners, advanced IBM technology, and Red Hat, you’ll gain the capabilities needed to drive meaningful change and help clients accelerate real-world impact. At IBM Consulting, curiosity powers performance—you're encouraged to challenge the status quo, test new ideas, and build solutions that produce measurable outcomes. Our growth-and-empathy culture prioritizes your long-term career development while recognizing and valuing your individual skills and experiences.

Your Role And Responsibilities

As a Security Consultant specializing in Exposure Management, you will be accountable for identifying, evaluating, and reducing security risks and exposures that may affect the organization’s assets, day-to-day operations, financial stability, and reputation. You will design and execute protection approaches against multiple threat types, supported by strong knowledge of cyber-security and risk management principles.

Your Primary Responsibilities Will Include

• Identify and Assess Risks: Perform exposure assessments to uncover potential vulnerabilities and the risks they create, using data analysis and industry trends to detect emerging risks and opportunities.
• Develop Risk Models: Build and maintain risk models and scenarios that simulate potential exposures, collaborating with peer cyber-security functions to deliver end-to-end recommendations to senior management on exposure management strategies and policies.
• Implement Protection Strategies: Create and deploy strategies to defend against a range of threat scenarios, using tools such as Tenable, Qualys, Nexpose Rapid 7, Ivanti Neurons, and Cisco Kenna.
• Collaborate with Cross-Functional Teams: Partner with cross-functional teams to support robust risk management and ensure alignment with industry standards and applicable regulations.
• Analyze Emerging Risks: Evaluate data and industry trends to surface emerging risks and opportunities, and provide recommendations to senior management on exposure management strategies and policies.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Cyber-Security Principles: Knowledge of cyber-security and risk management principles, including threat analysis and mitigation strategies.
• Risk Assessment Tools: Experience using vulnerability assessment tools such as Tenable, Qualys, Nexpose Rapid 7, Ivanti Neurons, and Cisco Kenna.
• Risk Modeling: Experience developing and maintaining risk models and scenarios to simulate potential exposures.
• Compliance and Regulations: Experience applying industry standards and regulations tied to comprehensive risk management.
• Threat Analysis: Experience analyzing data and industry trends to identify emerging risks and opportunities.
  
  

Preferred Technical And Professional Experience

• Vulnerability Assessment Tools: Hands-on experience with tools such as Tenable, Qualys, Nexpose Rapid 7, Ivanti Neurons, and Cisco Kenna is beneficial for identifying potential vulnerabilities and associated risks.
• Risk Modeling Techniques: Experience developing and maintaining risk models and scenarios to simulate potential exposures can help support the delivery of holistic recommendations to senior management.
• Compliance and Regulations: Familiarity with industry standards and regulations related to comprehensive risk management can support ensuring compliance and mitigating security risks.