Global Mainframe Security Consult Lead

As a Security Consultant, you'll be the guardian of confidentiality, integrity, and availability, ensuring organizations are shielded from the ever-evolving threat landscape. Your expertise will be sought after as you assess, analyze, and implement effective security measures in customer environments, leaving no stone unturned when it comes to safeguarding their most sensitive data.

Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses.

You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework.

The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions.

In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense.

Your influence won't be limited to systems alone. You'll lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring they are secure by design from inception.

Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships.

Our consultants are restless for innovation. They are at the edge of technology, changing the way our customers implement business solutions - so, if you're a problem-solver, an innovative thinker, and a self-starter with a passion high impact assignments which align technology to business outcomes, then we want to hear from you! Apply today to join our team that has a host of exciting projects and customers waiting for you to work with them to solve complex transformation puzzles through technology.

We are seeking an experienced Mainframe Security Consultant to drive mainframe security, compliance, and risk management initiatives for our clients. As a key leader in our security practice, you will be responsible for assessing, designing, development and implementing mainframe security solutions across IBM z/OS, RACF, ACF2, and Top Secret (TSS) environments. This role requires deep expertise in Mainframe products (like zSecure, Vanguard etc.), Mainframe environments (z/OS, RACF, ACF2, Top Secret), regulatory requirements (GDPR, DORA, PCI DSS, HIPAA, SOX etc.). The candidate must have Mainframe migration experience and would be good to have exposure to Mainframe migration tools.

Key Responsibilities:

Practice Leadership & Strategy:

• Develop and drive the Mainframe security consult strategy
• Stay ahead of Mainframe security trends, technologies, and best practices to enhance service offerings
• Collaborate with leadership to define roadmaps, frameworks, and service models
• Establish and refine Mainframe security methodologies, standards, and governance models
• Design and develop Mainframe modernization strategies and any other strategy as required to be in alignment with the progress in the industry including quantum cryptography, encryption etc.

Client Engagement & Advisory:

• Act as a trusted advisor to clients, understanding their Mainframe security needs and challenges
• Lead discovery workshops, requirement gathering, and solution demonstrations
• Provide expert guidance on Mainframe security, risk management, and compliance
• Develop proposals, statements of work (SOWs), and client presentations

Team Leadership & Mentoring:

• Lead and mentor a team of Mainframe security consultants
• Provide training and knowledge-sharing sessions on Mainframe security and best practices
• Foster a culture of innovation, collaboration, and continuous improvement
• Provide mentorship and guidance to junior Mainframe security consultants

Project Leadership & Stakeholder Engagement:

• Lead Mainframe consulting strategic projects including design and development of mainframe architecture
• Lead the response to RFPs pertaining to Mainframe security
• Work closely with CISOs, IT security teams, infrastructure teams, and auditors to design security controls
• Conduct training, workshops, and knowledge-sharing sessions for Mainframe security best practices
• Provide mentorship and guidance to junior security consultants

Mainframe Security Strategy & Architecture:

• Design and document Mainframe security frameworks, policies, and role-based access control (RBAC) models
• Design, develop and document the security controls for Mainframe environments
• Implement Share security best practices for z/OS, CICS, DB2, MQ, USS, and other Mainframe subsystems
• Secure batch processing, JCL scripts, system exits, and dataset access controls
• Collaborate with multiple teams to enable Mainframe security with enterprise authentication solutions (LDAP, Kerberos, SAML, and MFA)

Mainframe Security Risk, Compliance & Audit:

• Ensure compliance with SOX, PCI-DSS, GDPR, DORA, HIPAA, ISO 27001, NIST, and other industry regulations
• Implement logging, monitoring, and real-time security event detection using SIEM tools (Splunk, QRadar, ArcSight)
• Coordinate with SOC team to ensure logging, monitoring, and real-time security event detection using SIEM tools (Splunk, QRadar, ArcSight)
• Perform access reviews, security risk assessments, audit reporting, and compliance assessments

Your Future at Kyndryl
As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts - presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth

Benefits for you

Kyndryl Poland is proud to be certified last year by "Mamo Pracuj" foundation as Parents Friendly Employer.

In joining Kyndryl Poland you will work for a diverse company that invests in your future and join a team culture that amplifies learning, and development agility.

Kyndryl has a flexible working policy. Depending on the position there are a number of options including some home working opportunities. These ensure a better balance and improved flexibility both inside and outside of work for you.

Plus, we offer many other cultural and environmental benefits to our employees. From an agile office space with games room, to team dinners and seasonal gifts. As well as Charity, ESG initiatives and focus groups, where our employees co-create our new company culture strongly based on their personal feedback and sentiments.

Our employees enjoy varying other options too: utilizing our BeWell Program (with online consultants in law, tax, life events, psychology, coaching); opting in for the Retirement pension plan and we have a Cafeteria platform, with Kyndryl benefits points.

Of course, you can also take advantage of other great offerings:

• Private health card
• Life insurance package
• Multisport Card
• Discounts for Kyndryl employees
• A wide range of benefit options for parents and children
• Sports activities and team events
• Free language courses & many personal development possibilities
• Employee referral program
• Mindfulness and Yoga Classes

These are just a part of the initiatives and opportunities available to you, as we continuously develop as an Employer of Choice.

We are looking forward to seeing you join us!

Information on how to report breaches of law at Kyndryl in connection with the Whistleblower Protection Act of June 14, 2024:
https://preview.kyndryl.com/pl/pl/company/whistleblower-global-services?cde

Who You Are

You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.

Required Skills and Experience

• 15+ years of experience in Mainframe security administration, access management, and compliance
• Expertise in IBM RACF, CA ACF2, and/or CA Top Secret (TSS) security consulting assignments
• Experience with executing strategic programs for Mainframe environments
• Strong knowledge of IBM z/OS security, CICS, DB2, MQ, and USS security configurations
• Expertise in Mainframe encryption, cryptographic services, and key management
• Familiarity with compliance frameworks (SOX, PCI-DSS, GDPR, ISO 27001, NIST)
• Strong leadership and team management experience
• Excellent communication and stakeholder management skills
• Ability to engage with C-level executives and technical teams alike

Preferred Skills and Experience

• Knowledge of SIEM integration and real-time security monitoring for Mainframe logs
• Experience in IAM and PAM for Mainframe environments including integrating Mainframe security with modern IAM solutions (SailPoint, CyberArk, Okta)
• Certifications such as IBM Certified System Administrator - Security for z/OS, CISSP, CISM, or CRISC

Being You

Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!

If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.