Information Security Analyst

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

The Office of Information Security (OIS) is responsible for implementing global security policies and standards within NTT DATA, Inc. across corporate and business areas. The OIS supports, monitors, and advises regional units, IT, delivery, and business stakeholders on information security matters across Middle East & Africa. As a Security Analyst, you will support business security and security governance activities by helping implement and maintain strong security practices, controls, documentation, risk management, compliance, and reporting across the region.

This role requires practical information security experience, analytical rigor, attention to detail, and clear communication with technical and non-technical stakeholders. This role is required to monitor the organization's computer networks for security issues, install security software, and document any security issues or breaches found. The Information Security Analyst is responsible for assisting in the planning, implementation, and management of information security measures to safeguard the organization's digital assets and systems and contributes to maintaining a secure and compliant environment.

• Work under the supervision of the BISO of Middle East & Africa, supporting OIS strategy, priorities, and recurring operational activities.
• Perform security risk analysis for business opportunities, projects, services, products, and assets, identifying threats, gaps, compliance impacts, and mitigation actions.
• Support governance, risk management, and compliance activities, including implementation and maintenance of security policies, controls, regulatory requirements, and ISMS-related evidence.
• Assess supplier security by supporting new vendor approval processes and reviewing security controls of existing suppliers.
• Assist with customer security questionnaires, audits, due diligence requests, internal audit activities, evidence collection, and certification initiatives such as ISO 27001 or related standards.
• Support security risk assessment, vulnerability management, remediation coordination, and reporting with Security Operations and other relevant teams.
• Support standard incident management processes by coordinating information, documentation, and follow-up with business, IT, and security teams.
• Monitor and report security KPIs, training metrics, dashboards, risks, findings, and remediation status to improve the overall security and compliance posture.
• Provide first-level guidance to business stakeholders on security controls, compliance obligations, mitigation plans, and corporate information security requirements.
• Maintain accurate security documentation, reports, procedures, and knowledge materials for business security, governance, compliance audits, and operational activities.
• Collaborate with delivery, compliance, legal, data protection, managed security services, certification teams, and regional stakeholders as needed.
• Perform additional duties assigned by the BISO or CISO.

• Knowledge of information security standards, frameworks, and best practices such as ISO 27001, ISO 22301, ISO 42001, and related control environments.
• Understanding risk analysis, control assessment, compliance monitoring, regulatory frameworks, ISMS support, supplier security, audit evidence, and vulnerability management processes.
• Experience using GenAI tools in a professional…