Principal Information Security Governance, Risk and Compliance

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it's a place where you can grow, belong and thrive.

Your day at NTT DATA
The Principal Information Security Governance, Risk and Compliance (GRC) Specialist is a highly skilled subject matter expert, responsible for providing strategic direction, and oversight in the areas of information security governance, risk management, compliance, security awareness, and policy development.

This role involves collaborating with senior stakeholders to establish and maintain a robust security framework, driving risk assessments, ensuring regulatory compliance, and fostering a culture of security awareness throughout the organization.

This role may be required to mentor and guide junior members of the GRC team. Key responsibilities:

• Defines and executes the organization's information security governance strategy.
• Develops and maintains a comprehensive risk management program, including risk assessments, mitigation plans, and continuous monitoring.
• Establishes and maintains relationships with regulatory bodies and industry groups to ensure compliance with relevant laws and standards.
• Provides expert guidance to senior leadership on security-related matters and emerging threats.
• Leads the design and implementation of security policies, standards, and procedures.
• Conducts thorough audits and assessments to identify vulnerabilities and recommend corrective actions.
• Mentors and guides junior members of the GRC team.
• Collaborates with cross-functional teams to integrate security into business processes and projects.
• Drives security awareness initiatives and ensure adherence to security policies.
• Performs any other related task as required.

To thrive in this role, you need to have:

• Extended knowledge of information security frameworks, regulations, and industry standards.
• Strategic thinking and ability to align security initiatives with business objectives.
• Excellent communication skills, with the ability to influence and negotiate at a senior level.
• Strong analytical and problem-solving capabilities.
• Proven track record in managing complex security projects and initiatives.
• Ability to stay current with evolving security trends and threats.
• Strong business acumen and risk assessment skills.
• Extended proficiency in security awareness program development and policy management.

Academic qualifications and certifications:

• Bachelor's degree or equivalent in Information Technology or Computer Science degree or related field.
• Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred.
• Certifications such as Lead audit/Implementer - ISO 27001, SOC TSP preferred.

Required experience:

• Extended experience in information security, with a focus on governance, risk, compliance, security awareness, and policy management.
• Extended experience in a team leadership role and driving strategic initiatives.

Workplace type:

Hybrid Working

About NTT DATA
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services.  Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.

Third parties fraudulently posing as NTT DATA recruiters 

NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters—whether in writing or by phone—in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an email address. If you suspect any fraudulent activity, please contact us.

---