Technical Consultant - Data & Quantum Security

About the role

Employer: (0147) International Business Machines Corporation

We are seeking a seasoned Data Security Architect to lead the design, strategy, and implementation of enterprise-grade data protection solutions. This is a senior individual-contributor and advisory role responsible for shaping the cryptographic and data security posture of the organization — from classical PKI and key management to quantum-safe cryptographic transformation at scale.
You will work across engineering, compliance, and executive stakeholders to define frameworks, evaluate emerging threats, and drive data security modernization programs that protect our most sensitive assets — today and in a post-quantum world.

Key Responsibilities

Data Protection Strategy & Frameworks
* Design and own the enterprise Data Protection Architecture — covering data at rest, in transit, and in use across on-premises, cloud, and hybrid environments.
* Develop and maintain a Data Security Reference Architecture aligned with industry frameworks (NIST CSF, NIST SP 800-53, ISO 27001, DPDPA, GDPR, CCPA, PCI-DSS).
* Define data classification policies, protection controls, and governance standards across structured, unstructured, and streaming data.
* Architect Data Loss Prevention (DLP), tokenization, format-preserving encryption (FPE), and data masking solutions at enterprise scale.
* Develop capabilities to implement security for enterprise data security solutions e.g. Microsoft Purview, Varonis, Palo Alto, Cyera etc.
* Lead data security risk assessments, threat modeling exercises, and control gap analyses.

Quantum-Safe Discovery & Cryptographic Transformation
* Lead the organization's Post-Quantum Cryptography (PQC) readiness program — from cryptographic inventory to full migration.
* Conduct Cryptographic Bill of Materials (CBOM) discovery across applications, APIs, data stores, and infrastructure to identify quantum-vulnerable assets.
* Collaborate with application owners and platform teams to prioritize and execute cryptographic transformation roadmaps.

This role can be performed from anywhere in the US.