Cybersecurity Engineering - Mainframe Security Lead

Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world's leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people-Kyndryls-that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role The Mainframe Security is responsible for safeguarding enterprise mainframe environments by managing access controls, monitoring security events, and ensuring compliance with organizational and regulatory standards. This role involves close collaboration with IT operations, audit teams, and business stakeholders to maintain a secure and resilient mainframe infrastructure. Key Responsibilities Administer and maintain RACF (or equivalent tools such as ACF2, Top Secret) to enforce logical access controls. Define, review, and update user profiles, groups, and permissions in z/OS environments. Monitor and analyze SMF records, logs, and reports to detect unauthorized access or anomalies. Support audits and compliance initiatives (SOX, ISO 27001, GDPR, LGPD). Implement and maintain encryption, digital certificates, and secure communication protocols on mainframe systems. Collaborate with cross-functional teams to resolve security incidents and strengthen preventive measures. Provide documentation and training on mainframe security policies and procedures. Your future at Kyndryl Every position at Kyndryl offers a way forward to grow your career, from Junior System Administrator to Architect. We have opportunities for Cloud Hyperscalers that you won't find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. One of the benefits of Kyndryl is that we work with clients in a variety of industries, from banking to retail. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your Who You Are You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others. Required Technical and Professional Experience Basic Knowledge of Security and good security best practices 6 + years of Hands-on administration of RACF login ID's, dataset, and resource rules. Understanding and maintenance of RACF Dataset Profiles Monitor system security policy and violations/incidents. Familiarity with RACF documentation and manuals. Understanding of z/OS integrity & security architecture Understanding of RACF architecture and control mechanisms Familiarity with the z/OS console commands for RACF Familiarity with the RACF backup process Familiarity with the RACF SETROPTS listing and specifying options. Familiarity with RACF utilities (i.e. IRRDBU00, IRRUT200, IRRRID00, etc.) Familiarity with RACF SMF data unload utility and RACFICE reports Understanding of RACF Exits and Modules. Perform and review daily, weekly, and monthly audit reports. Liaison with business areas and other technical support areas Provide customer support by preparing ad hoc reports and giving presentations. Monitors the environment for adherence to security standards. Must be available 24 x7 Preferred Professional and Technical Expertise Excellent TSO, JCL, IBM UTILITIES, JES2, and ISPF a must Experience with zSecure or anyother security tools preferred Experience using Vanguard security products is desired. General Knowledge: MVS experience is an added advantage PC Skills (Microsoft Outlook, Word, Excel, PowerPoint) Personal Skills: S