Director, Services Security, Information Security

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations and for making a difference to our clients and society. Our workplace embraces diversity and inclusion its a place where you can grow belong and thrive.

Your day at NTT DATA
The Director Information Security is a leadership role responsible for overseeing and leading organizational information security program(s).

This role plays a critical role in contributing towards the development of as well as driving the implementation of company security and governance strategy frameworks policies and practices enabling a risk-free and scalable business operations.

The Director Information Security collaborates with cross functional teams and senior leadership and other stakeholders to maintain a robust and proactive information security posture whilst fostering a collaborative and innovative team culture focused on operational excellence.

Key responsibilities:

• Contributes towards the development and drives the implementation of an organization-wide information security strategy aligned with the NTTs business objectives.
• Contributes towards establishing and maintaining information security policies procedures standards and guidelines that comply with industry best practices and regulatory requirements.
• Oversees the identification assessment and management of information security risks across the organization including data systems networks and third-party relationships.
• Promotes a culture of security awareness among employees through training education and regular communication.
• Oversees the development and execution of incident response plans to effectively address and mitigate security incidents.
• Ensures NTTs compliance with relevant security regulations laws and industry standards.
• Assesses and selects appropriate security technologies and solutions to protect NTTs digital assets.
• Implements security monitoring tools and systems to detect and respond to security threats and providing regular reports to executive leadership and stakeholders.
• Stays informed about emerging security threats and industry trends to continuously enhance the organizations security posture.
• Evaluates security risks associated with third-party vendors and service providers and implementing risk mitigation strategies.
• Effectively communicates security incidents responses and mitigation efforts to relevant stakeholders.
• Coordinates and manages internal and external security audits and assessments.
• Provides guidance and leadership to the information security team ensuring adherence to security policies and procedures.

To thrive in this role you need to have:

• Significant knowledge of security frameworks and standards (for example ISO 27001 NIST CIS etc.).
• Significant knowledge about PCI HIPAA NIST GLBA and SOX compliance assessments.
• Significant understanding of security technologies tools and best practices.
• Excellent communication and presentation skills with the ability to effectively convey complex security concepts to non-technical stakeholders.
• Significant leadership and team management skills to lead and motivate a diverse security team.
• Strategic thinking and problem-solving abilities with a focus on delivering results.
• Significant business acumen and the ability to align security objectives with overall business objectives.

Academic qualifications and certifications:

• Bachelors degree or equivalent in business administration or a technology-related field such computer science or information technology or related preferred.
• An advanced degree such as an MBA or Masters in an IT related field with a security focus preferred.
• Related Cybersecurity risk management and data privacy certifications preferred such as CompTIA Security CISSP CISM CISA and/or CEH.

Required experience:

• Significant experience in a combination of risk management information security and IT roles in a global organization.
• Proven track record of successfully developing and implementing enterprise-wide information security strategies and initiatives.
• Significant experience with contract and vendor negotiations and management.
• Significant experience in Agile (scaled) software development or other best in class development practices.
• Significant experience with Cloud computing / Elastic computing across virtualized environments.
• Significant experience in risk management compliance and regulatory requirements related to information security.
• Significant…