Cybersecurity SME (IBM MQ Security) - #2169627

Role Overview :

Seeking an experienced Cybersecurity Architect/SME to assess, strengthen, and govern the security posture of the enterprise IBM MQ and messaging estate within a global banking environment. The role will evaluate current controls, identify security gaps against bank cybersecurity standards, and drive security remediation and uplift initiatives.

Key Responsibilities:

• Assess and review IBM MQ security architecture, controls, and operational practices.
• Evaluate compliance with enterprise cybersecurity policies, standards, and regulatory requirements.
• Define and implement security controls for data in transit and data at rest.
• Design and review TLS/mTLS, PKI, certificate management, encryption, key and secrets management solutions.
• Strengthen authentication, authorization, IAM, RBAC, and privileged access controls across messaging platforms.
• Apply Zero Trust principles and secure-by-design architecture patterns.
• Support secure messaging across APIs, Kubernetes, Service Mesh, Cloud (GCP), and Event-Driven Architectures.
• Produce security assessments, risk findings, remediation plans, and uplift recommendations.
• Provide technical leadership and engage with architecture, engineering, risk, and cybersecurity stakeholders.

Required Skills:

• Strong experience in IBM MQ Security Architecture and secure messaging environments.
• Expertise in Messaging Security, Data Security, Encryption, TLS/mTLS, PKI, Public Key Infrastructure, Certificates, and Secrets Management.
• Knowledge of IAM, Authentication & Authorization, OAuth2, OIDC, SAML, SCIM, Workload Identity, and Zero Trust Architecture.
• Experience with Cloud Security (GCP), Kubernetes, API Security, and Service Mesh.
• Strong understanding of Security Architecture, Risk Management, Governance, and Compliance within regulated financial institutions.
• Excellent stakeholder management and technical leadership skills.

Preferred Experience:

• Experience in Global Banking / Financial Services environments.
• Experience leading cybersecurity assessments, control reviews, and strategic security uplift programs.