**Introduction** At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, let's talk. **Your role and responsibilities** · Maintaining and enhancing the compliance posture for Platform infrastructure and services · Identifying and leading initiatives to drive enhanced automation for compliance activity · Timely monitoring and reporting of compliance status · Delivering clear and concise responses to audit requests · Proactively identifying issues and improvement opportunities · Collaborating with other professionals and stakeholder teams to determine functional and non-functional requirements for new processes and automations · Working in a global team collaborating with IBMers to share recommendations, solutions and ideas **Required technical and professional expertise** · Working knowledge of information security best practices such as: ISO 27000 series, GDPR and compliance programs such as FedRAMP, HIPAA, GDPR, SOC 2, or PCI · Ability to develop and implement appropriate processes to achieve and maintain compliance and reduce risk · Ability to manage multiple tasks, while ensuring that commitments and timetables are met · Excellent written and verbal communication skills as well as flexibility to work with team members in other time zone · Knowledge of compliance tools such as vulnerability scanners (Nessus), EDRs, etc. **Preferred technical and professional experience** · Project Management knowledge or experience a strong plus · Familiarity with any major cloud provider · Scripting skills · Understanding of Cloud/DevOps/SRE · Knowledge of automation and configuration management tools · Familiarity with Kubernetes/OpenShift · Experience in programming with Python or Go