Principal Information Security Services Architect

**Make an impact with NTT DATA**
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it’s a place where you can grow, belong and thrive.

**Your day at NTT DATA**

This role provides assistance to business stakeholders and oversees the security capability within the assigned business area.

**Key responsibilities**:

- Provides technical consulting services in multi-platform IT environments and performs analytical assignments as required by project management, particularly in complex areas of difficulty or critical need.
- Identifies and investigates opportunities to use emerging technologies in providing cost effective and flexible solutions and maintaining current knowledge of the organization's business plans, existing infrastructure and emerging technologies.
- Identifies areas for improvement by reviewing new and existing information technology projects for compliance to IT architecture.
- Liaises with and provides SME advice on information security matters such as BAU security activities, emerging security risks and relevant security controls, across the BU functions in addition to senior management, department heads and managers.
- Works with senior leaders/managers to champion the priority of security initiatives.
- Delivers a “center of excellence” for information security, offering internal consultancy, advice and pragmatic assistance on information security risk and control matters throughout the organization and promoting the advantages of managing information security risks more efficiently and effectively
- Guides the development of a layered defense strategy to protect our assets.
- Oversees the design and build of an advanced security operations function.
- Functions as an internal consulting resource on information security issues and incidents.
- Provides security architecture and risk guidance for projects and products, including the evaluation and recommendation of technical controls and solutions.
- Mitigates enterprise vulnerabilities and reduce attack surface vectors identified through security reviews and controls implementation/
- Helps ensure compliance with applicable data security laws, regulations, and customer requirements.
- Documents and maps the architecture of current security infrastructure
- Leads and guides information security risk assessments and controls selection activities.
- Leads and/or or commissions information security controls, for both the build and run function.
- Oversees the design and operations of related security controls and improvement activities to ensure compliance both with internal security policies and applicable laws and regulations.
- Performs any other related task as required.

**To thrive in this role, you need to have**:

- Extended technical capability across a broad range of security products / solutions.
- Ability to map business needs to technology solutions.
- Extended understanding of information technology and Information Security.
- Extended working knowledge of infrastructure design, including network, storage and compute layers.
- Motivation and drive to succeed.
- Interpersonal skills and the ability to develop strong customer (internal / external) relationships.
- Extended industry and market awareness.
- Ability to negotiate / influence.
- Comfortable with presenting and communicating solutions at a business and technical level.
- Strong professional documentation skills.
- A team player willing to develop and share IP.
- A strong client service orientation.

**Academic qualifications and certifications**:

- Bachelor's degree or equivalent in Information Security or related.
- Industry relevant certifications such as CISSP, CISM, CEH, SANS/GIAC certifications or CompTIA Security+ desirable.

**Required experience**:

- Extended technical experience in a similar role within a large scale (preferably multinational) technology services environment.
- Extended experience with security architecture/consulting, gap analysis and risk assessments.
- Extended experience with business continuity planning, auditing, and risk management, as well as contract and vendor negotiation.
- Extended experience with security architecture design principles.
- Extended experience with industry compliance and standards such as ISO 27000, PCI, NIST, HIPAA or others.
- Solid experience with security tools and techniques that cover SANS Top 25, OWASP or others.
- Solid project management experience.
- Extended experience working in a multi-team environment across multiple geographies and time zones.

**Workplace type**:
Hybrid Working

**About NTT DATA**

**Equal Opportunity Employer**

**Third parties fraudulently posing as NTT DATA recruiters