About this role
At IBM Software, we transform client challenges into solutions. Building the world's leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You'll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM's product and technology landscape. Here, you'l have the tools and opportunities to advance your career while creating software that changes the world. About the Job Confluent is pioneering a fundamentally new category of data infrastructure focused on data in motion. Have you ever found a new favorite series on Netflix, picked up groceries curbside at Walmart, or paid for something using Square? That’s the power of data in motion in action—giving organizations instant access to the massive amounts of data that is constantly flowing throughout their business. At Confluent, we’re building the foundational platform for this new paradigm of data infrastructure. Our cloud-native offering is designed to be the intelligent connective tissue enabling real-time data, from multiple sources, to constantly stream across the organization. With Confluent, organizations can create a central nervous system to innovate and win in a digital-first world. We’re looking for self-motivated team members who crave a challenge and feel energized to roll up their sleeves and help realize Confluent’s enormous potential. Chart your own path and take healthy risks as we solve big problems together. We value having diverse teams and want you to grow as we grow—whether you’re just starting out in your career or managing a large team, you’ll be amazed at the magnitude of your impact. About The Role As the Senior Technical Program Manager, Governance, Risk, and Compliance in the Trust, Security & Reliability organization, you will play a critical role in fulfilling the vision to secure Confluent’s platform and cloud offerings through a combination of technical expertise, security risk management, customer assurance, third-party risk management, and excellent program management skills. You should be experienced in creating and maintaining risk registers, developing and reporting on key risk indicator(s), conducting third party risk assessment, and facilitating security control discussions with internal and external stakeholders, and customers. What You Will Do Help support various parts of the company to adopt a common risk and control framework Perform third-party risk assessments to maintain oversight of third-party vendors Help with maintenance of risk register and issue management programs to ensure security risks are centrally and consistently cataloged, appropriately monitored, reported and risk treatment decisions are clearly documented Assist in periodic re-validation of our Top Risks and drive improvements for risk reduction Assist with the implementation and operation of Governance Risk and Compliance (GRC) tooling to further improve and automate our GRC processes Assist with all ongoing compliance activities related to the implementation, maintenance, monitoring, and continuous improvement of the Information Security Management System (ISMS) Evaluate the effectiveness of information security controls and performance by developing, monitoring, gathering, and analyzing information security and compliance metrics for management Advise and collaborate with SMEs, including Audit & Compliance teams, to ensure adequate security controls are in place to manage risk and are aligned with leading best practices Perform security policy and standard gap analysis, propose and evaluate appreciate changes Experience working with Agile methodology, JIRA, and GRC tools 6+ years of relevant industry experience Strong knowledge of and experience in security risk management lifecycle Familiar with security compliance frameworks and requirements, e.g., SOC 1/2, HITRUST, FedRAMP, IRAP, PCI, ISO27001, NIST CSF Experience in third party risk assessment and third party risk continuous monitoring Experience in security policy governance lifecycle Experience working with, Cloud technologies/environments, AWS or other related cloud experience is required Strong communication, interpersonal and leadership skills to work with both engineering and other non-technical stakeholders Strong security and compliance domain knowledge • Industry Trend Awareness: Staying abreast of industry trends, concerns, and issues related to security, risk, regulatory, and compliance matters, applying this knowledge to inform risk management and compliance strategies. • Advanced Risk Management: Experience with identifying and assessing complex risks within processes, developing effective mitigation plans to minimize risk and improve overall compliance. • Compliance Framework Knowledge: Familiarity with regulatory requirements and compliance frameworks, ensuring processes are designed and implemented with security, risk, and compliance considerations in mind. United States Software Engineering Remote Professional Multiple Cities POUGHKEEPSIE LOWELL ROCHESTER TUCSON RESEARCH TRIANGLE PARK Armonk Boston Bellevue Atlanta San Jose Dallas Houston Austin San Francisco Seattle (0147) International Business Machines Corporation Design Inform Mitigation Regulatory Requirements Risk Management Security Compliance Risk Confluent Compliance Programs