Lead GRC Strategist - Quantum & AI Compliance

IBM; San Diego (CA); On-site; USD 130,000 - 180,000; Full time

Job summary

IBM Research is seeking a Lead GRC Strategist to guide governance, risk, and compliance across the IBM Quantum program. You will partner with technical, legal, and business teams to embed controls in daily operations and ensure a robust compliance posture.

The role demands expert collaboration with auditors and executives, strong regulatory knowledge, and hands-on experience driving SOC 2 readiness and remediation. Master’s degree required.

Qualifications

• 7+ years of experience in Governance, Risk, Compliance (GRC), Information Security, IT Audit, or Compliance Management.
• Demonstrable experience leading SOC 2 Type I and Type II audits including readiness assessments, control monitoring, evidence collection, and remediation tracking.
• Experience working directly with auditors, executive leadership, and cross-functional technical teams.
• Professional certifications such as CISA, CRISC, CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent.
• Support additional compliance initiatives as needed, including FedRAMP, ITAR, ISO 27001, NIST CSF 2.0, PCI DSS, HIPAA, GDPR, AI governance, and other relevant frameworks.

Responsibilities

• Lead and maintain the Governance, Risk, and Compliance (GRC) efforts within the IBM Quantum program.
• Partner with technical, operational, legal, privacy, and business teams to ensure effective controls are designed, implemented, tested, and continuously improved.
• Translate regulatory and audit requirements into practical business controls to enable secure scalability and proactive risk management.

Skills

GRC

Information Security

Audit management

Regulatory compliance

Risk management

Cross-functional collaboration

Auditor liaison

Education

Master's Degree

Job description

IBM Research is seeking a Lead GRC Strategist to guide governance, risk, and compliance across the IBM Quantum program. You will partner with technical, legal, and business teams to embed controls in daily operations and ensure a robust compliance posture.

The role demands expert collaboration with auditors and executives, strong regulatory knowledge, and hands-on experience driving SOC 2 readiness and remediation. Master’s degree required.