وصف الوظيفة
Role Overview
Security Apps Lead at NTT DATA Limited. This is a developing management role responsible for operationally managing organizational information security program(s).
Company Overview
NTT DATA is a $30+ billion business and technology services leader serving 75% of the Fortune Global 100. The company is committed to accelerating client success and positively impacting society through responsible innovation. NTT DATA is one of the world's leading AI and digital infrastructure providers with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. As a Global Top Employer, the company has experts in more than 50 countries and offers clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.
Role Purpose
The Security Apps Lead plays an important role in managing the implementation of company security and governance strategy, frameworks, policies, and practices enabling risk-free and scalable business operations. The role collaborates with cross-functional teams, management, and other stakeholders to maintain a robust and proactive information security posture whilst fostering a collaborative and innovative team culture focused on operational excellence.
Key Responsibilities
Strategy and Implementation
- Provide operational management in the implementation of an organization-wide information security strategy aligned with business objectives.
- Maintain and implement information security policies, procedures, standards, and guidelines that comply with industry best practices and regulatory requirements.
- Assist with assessing and selecting appropriate security technologies and solutions to protect company digital assets.
Risk Management and Compliance
- Coordinate the identification, assessment and management of information security risks across the organization, including data, systems, networks, and third-party relationships.
- Ensure company compliance with relevant security regulations, laws, and industry standards.
- Coordinate and manage internal and external security audits and assessments.
Incident Response and Monitoring
- Coordinate the execution of incident response plans to effectively address and mitigate security incidents.
- Implement security monitoring tools and systems to detect and respond to security threats.
- Provide regular reports to senior leadership and stakeholders on security posture and incidents.
- Effectively communicate security incidents, responses, and mitigation efforts to relevant stakeholders.
Security Awareness and Culture
- Promote a culture of security awareness among employees through training, education, and regular communication.
- Stay informed about emerging security threats and industry trends to continuously enhance the organization's security posture.
Team Leadership
- Provide guidance and management to the information security team, ensuring adherence to security policies and procedures.
Qualifications & Experience
Education
- Bachelor's degree or equivalent in business administration or a technology-related field required (e.g., computer science, information technology, etc.).
Certifications
- Related Cybersecurity, risk management and data privacy certifications preferred: CompTIA Security+, CISSP, CISM, CISA, and/or CEH.
Professional Experience
- Solid experience in a combination of risk management, information security and IT roles in a global organization.
- Solid experience with contract and vendor negotiations and management.
- Solid experience in Agile (scaled) software development or other best in class development practices.
- Solid experience with Cloud computing / Elastic computing across virtualized environments.
- Solid experience in risk management, compliance and regulatory requirements related to information security.
- Solid experience working with national and international regulatory compliance frameworks such as NIST, ISO, SOX, EU GDPR, CCPA and PCI DSS.
- Solid experience and working knowledge of the following areas of technical expertise: information policy formulation, information security management, business risk management, IT risk assessment and management, IT continuity management, IT governance formulation, organizational change management, IT financial management and IT audit.
Skills & Competencies
- Solid knowledge of security frameworks and standards (e.g., ISO 27001, NIST, CIS, etc.).
- Solid understanding of security technologies, tools, and best practices.
- Excellent communication and presentation skills with the ability to effectively convey complex security concepts to non-technical stakeholders.
- Developing team management skills to lead and motivate a diverse security team.
- Good problem-solving abilities with a focus on delivering results.
- Good business acumen and the ability to align security activities with overall security strategic objectives.
Additional Information
- Workplace type: On-site
- NTT DATA is an Equal Opportunity Employer committed to providing an environment free of unfair discrimination and harassment and does not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category.