Lead GRC Analyst

What you'll do

• Lead and maintain Governance, Risk, and Compliance (GRC) efforts within the IBM Quantum program.
• Design, implement, test, and improve internal controls to support customer trust and regulatory obligations.
• Translate complex regulatory and audit requirements into practical business controls for scalable operations.
• Manage SOC 2 Type I and Type II audits including readiness assessments and evidence collection.
• Partner with technical, legal, and privacy teams to ensure compliance across various frameworks like FedRAMP and ISO 27001.
• Proactively manage risks and maintain a strong compliance posture for quantum computing infrastructure.
• Support additional compliance initiatives such as AI governance, NIST CSF 2.0, and GDPR.

What we're looking for

• Master's Degree (preferred).
• 7+ years of experience in GRC, Information Security, IT Audit, or Compliance Management.
• Experience leading SOC 2 Type I and Type II audits including readiness assessments and remediation tracking.
• Experience working with auditors, executive leadership, and cross-functional technical teams.
• Professional certifications such as CISA, CRISC, CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent.
• Ability to support compliance initiatives including FedRAMP, ITAR, ISO 27001, NIST CSF 2.0, PCI DSS, HIPAA, GDPR, and AI governance.
• Experience with quantum computing environments, automation via scripting/programming, or working in research-focused environments (preferred).