Director: Information Security Auditing

Continue to make an impact with a company that is pushing the boundaries of what is possible. At NTT DATA, we are renowned for our technical excellence, leading innovations, and making a difference for our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can continue to grow, belong, and thrive.

Your career here is about believing in yourself and seizing new opportunities and challenges. It’s about expanding your skills and expertise in your current role and preparing yourself for future advancements. That’s why we encourage you to take every opportunity to further your career within our great global team.

Your day at NTT DATA

The Director, Information Security Governance, Risk and Compliance is a leadership role that supports the company by way of protecting its brand, warranting compliance to its regulatory and contractual obligations.

This role participates with other senior managers to establish strategic plans and objectives and makes final decisions on administrative or operational matters and ensures operations effective achievement of objectives

This role is accountable for developing goals, objectives and program of work to achieve the strategic objectives, manage the people resources and budget for the program whilst fostering a collaborative and innovative team culture focused on operational excellence.

Key responsibilities:

• Oversees the development, evaluation and implementation of Information Security Policy, Standards, and Guidelines.
• Oversees information security risk assessments, TRA, TFA and policy compliance reviews and supports the development and operational effectiveness of IT security controls.
• Manages and monitors Group risk in the company preferred risk management solution, ensure that risk is assessed, allocated and assigned, managed, monitored, and treated appropriately.
• Develops, scopes and discusses security compliance review schedules, reviews risk registers, risk and policy exceptions and authorization and performs threat and risk assessments of new technologies and vendors.
• Documents improvement in service design and ensures that the required security plan is developed and reviewed.
• Reviews service level and business requirements to develop service methodologies and an information security policy, assessments and methodologies.
• Advises on the reporting requirements and ensures the overall implementation of the ISM policy in service operation.
• Assists with the design and operation of related compliance with both internal security policies and application laws and regulations.
• Ensures that appropriate security assessment have been carried out so that the ISMS security strategy is developed and aligned to service and operational requirements.
• Develops an ISMS security audit management strategy that is aligned to service and operational requirements and develop information security design criteria and templates.