Security Consultant

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As an Security Consultant, you will unleash your analytical and technical prowess to analyze business requirements and help craft resilient, enterprise-wide cybersecurity strategies.

Your Responsibilities May Encompass

• Strategy & Risk Assessment: Assist in assessing clients' security maturity, conducting comprehensive risk assessments (asset and threat analysis), and supporting the development of strategic cybersecurity roadmaps.
• Cybersecurity Governance: Support the analysis, design, and optimization of enterprise cybersecurity policies, guidelines, and detailed security operational processes.
• Compliance & Privacy GAP Analysis: Assist in conducting GAP analyses against industry security standards (e.g., NIST CSF, IEC 62443) and global/domestic privacy regulations (e.g., PIPA, GDPR). Support the identification of control deficiencies and contribute to practical remediation planning.
• Certification Support: Support for security certifications (such as K-ISMS and ISO 27001) by helping draft required documentation, evaluate security controls, and support the end-to-end audit process.

• Strong problem-solving skills driven by a genuine interest and passion for emerging technologies, cybersecurity trends, and enterprise risk management.
• Foundational knowledge of information security frameworks (e.g., K-ISMS, ISO 27001, NIST), privacy regulations (PIPA, GDPR), and OT/ICS security standards.
• Excellent analytical mindset with the ability to translate technical concepts into structured, business-friendly documentation.
• Language proficiency: Native Korean, Fluent English.

• Multiple Cyber Security Certifications: Holding certifications in key cyber security areas, such as security solution implementation, risk mitigation, and security strategy development.
• Industry Trend Awareness: Maintaining a current understanding of industry trends to provide expert guidance and advice on security initiatives and projects.