Cybersecurity Cloud Consultant

Introduction

Information and Data are some of the most important organizational assets in today's businesses. As a Security Consultant, you will be a key advisor for IBM's clients, analysing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client's organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your role and responsibilities

The Cybersecurity Cloud Consultant is responsible for helping organizations design, implement, and maintain secure, resilient, and compliant cloud environments. This role requires a strong balance of technical expertise in cloud security architecture and strategic advisory capabilities, ensuring that cybersecurity practices align with business objectives and regulatory requirements.

Key Responsibilities:

• Design, validate, and maintain secure architectures for multi-cloud and hybrid environments.
• Define guardrails, security controls, and reference models aligned with industry frameworks (NIST, CIS, ISO 27001).

• Advise senior stakeholders on cloud security posture, risks, and mitigation strategies.
• Perform risk assessments, gap analyses, and maturity evaluations to guide security investment and remediation priorities.

• Lead configuration and deployment of cloud-native security controls.
• Ensure consistent enforcement of security baselines and policies across workloads and regions.

• Establish governance models and compliance monitoring for data protection and regulatory adherence (GDPR, LGPD, HIPAA, SOC 2).
• Implement automation and Infrastructure as Code to embed compliance and security-by-design principles.

• Integrate cloud workloads into SOC operations and enhance threat visibility and response.
• Collaborate with detection and response teams to optimize telemetry and incident handling using SIEM, SOAR, and XDR.

• Champion the adoption of advanced security paradigms such as Zero Trust, GenAI, and confidential computing.
• Drive initiatives that improve operational efficiency, accelerate secure deployments, and strengthen resilience.

• Partner with cloud architects, DevSecOps engineers, and business units to promote a security-first mindset.
• Deliver training and workshops to share best practices and elevate cloud security awareness.

• Stay current on emerging threats, cloud security trends, and evolving compliance standards.
• Recommend and implement ongoing enhancements to policies, tools, and processes.

• Strengthened security posture across cloud and hybrid infrastructures.
• Reduced exposure to cyber threats through automation and continuous monitoring.
• Seamless integration of security with business agility and innovation.
• Clear alignment between security governance and organizational goals.

• Proven experience in cloud security architecture across AWS, Azure, and/or GCP;
• Strong knowledge of governance, risk, and compliance frameworks, including NIST, CIS, ISO 27001, GDPR, LGPD, HIPAA, and SOC 2;
• Hands-on experience with multi-cloud and hybrid environments;
• Expertise in cloud-native security controls such as IAM, encryption, monitoring, and workload protection;
• Proficiency with Infrastructure as Code (IaC) and compliance automation tools;
• Familiarity with threat detection and incident response, integrating with SIEM, SOAR, and XDR platforms;
• Demonstrated ability to provide strategic security advisory aligning technical controls with business objectives;
• Up-to-date understanding of emerging technologies like Zero Trust, Generative AI, and confidential computing;
• Bachelor's degree in Information Security or related fields (mandatory).

• Experience in the banking industry will be considered an asset;
• Fluency in English is a plus.