At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
As our Mainframe Security RACF, you will work closely with our leadership team to design and implement effective security solutions that not only protect our business objectives and regulatory requirements but also provide innovative solutions to stay ahead of emerging threats.
Responsibilities:
* Lead the design and implementation of security architecture across the Service Provider environment.
* Conduct risk assessments and threat modeling to identify and prioritize risks.
* Develop and maintain security policies, standards, and guidelines.
* Collaborate with cross-functional teams to implement security controls including encryption, authentication, and authorization.
* Perform security reviews of vendors and third-party partners.
* Conduct regular security and risk assessments to identify vulnerabilities and recommend remediation.
* Advise senior leadership on emerging security threats and best practices.
* Stay current with industry trends, technologies, and regulatory changes.
Required Skills and Experience:
* Proven experience in security architecture within a Service Provider or enterprise environment.
* Experience in Mainframe services delivery or consulting.
* Strong background in working with global teams and client-facing engagements.
* Expertise in the Z platform, particularly z/OS, with working knowledge in database, middleware, storage, network, and performance domains.
* Proficiency in Mainframe ESMs such as RACF, ACF2, or TopSecret.
* Deep understanding of Z security concepts including PR/SM Virtualization, Common Criteria, HMC/SE Security, SAF, APF, Supervisor Calls, ACEE, SMF, Role-based Access, Privileged Access Management.
Preferred Skills and Experience:
* Mainframe IAM: Passphrases, MFA, Digital Certificates, JWT, SSO, LDAP integrations.
* Encryption Management: Symmetric/Asymmetric encryption, Key Management (UKO, SKLM), z/OS Dataset Encryption, zERT, ICSF, CPACF, TKE, Quantum-safe Encryption.
* Security Intelligence & Monitoring: IBM zSecure, Broadcom CEM, BMC AMI, SIEM integration.
* Patch Management: Security/Integrity APARs, vulnerability handling, ISV/OEM patching.
* Compliance & Privacy: NIST, PCI, HIPAA, GDPR, DORA, zSCC, DPfD, zCT.
* Advanced Security Concepts: Zero Trust, DevSecOps on Z, Threat Analytics, Ransomware protection, AI in Z Security, API & Network Security.
* Data Resiliency: File Integrity Monitoring, Immutable Copies, Disaster Recovery, GDPS, Cyber Vault.
We welcome people of all cultures, backgrounds, and experiences. Kyndryl gives you the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture.
Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter.
#J-18808-Ljbffr