Director of Information Security Governance & Risk

NTT Limited; Barcelona; Hybrid; EUR 120,000 - 180,000; Full time

Job summary

NTT DATA is seeking a Director of Information Security Governance, Risk and Compliance to lead policy development, risk assessment and compliance programs across the organisation. This role drives the ISMS strategy, engages senior stakeholders and ensures alignment with regulatory obligations.

The position is hybrid, demanding strategic thinking, strong leadership, and hands-on expertise in security controls, audits, and incident response to safeguard the company and its clients.

Qualifications

• Bachelor’s degree in Information Technology or Computer Science or related field.
• Security certifications such as CISA, CRISC, COBIT, IIA or equivalent preferred.
• Lead audit/Implementer - ISO 27001, SOC TSP preferred.

Responsibilities

• Oversees the development, evaluation and implementation of Information Security Policy, Standards, and Guidelines.
• Oversees information security risk assessments, TRA, TFA and policy compliance reviews and supports the development and operational effectiveness of IT security controls.
• Manages and monitors Group risk in the company preferred risk management solution, ensure that risk is assessed, allocated and assigned, managed, monitored, and treated appropriately.
• Develops, scopes and discusses security compliance review schedules, reviews risk registers, risk and policy exceptions and authorization and performs threat and risk assessments of new technologies and vendors.
• Documents improvement in service design and ensures that the required security plan is developed and reviewed.
• Reviews service level and business requirements to develop service methodologies and an information security policy, assessments and methodologies.
• Advises on the reporting requirements and ensures the overall implementation of the ISM policy in service operation.
• Assists with the design and operation of related compliance with both internal security policies and application laws and regulations.
• Ensures that appropriate security assessment have been carried out so that the ISMS security strategy is developed and aligned to service and operational requirements.
• Develops an ISMS security audit management strategy that is aligned to service and operational requirements and develop information security design criteria and templates.
• Considers technical requirements and implications of service and business levels and develop the ISMS security review criteria, verifying that the solution design meets ISMS, client, and regulatory requirements.
• Evaluates the adequacy, implementation, maintenance of operational processes, guides and drives the implementation of process controls to ensure alignment to ISMS obligations.
• When deviations occur, ensures root cause is identified and treated.
• Monitors and holds accountable managers to implement prevention and remediation to ensure ongoing compliance to ISM policy.

Skills

People management

Information security

Risk management

Policy development

Stakeholder communication

Strategic thinking

Project management

Education

Bachelor’s degree in Information Technology or Computer Science

CISA/CRISC/ COBIT/IIA or equivalent certifications

ISO 27001 Lead auditor/Implementer

SOC TSP certifications

Tools

ServiceNow GRC

Job description

NTT DATA is seeking a Director of Information Security Governance, Risk and Compliance to lead policy development, risk assessment and compliance programs across the organisation. This role drives the ISMS strategy, engages senior stakeholders and ensures alignment with regulatory obligations.

The position is hybrid, demanding strategic thinking, strong leadership, and hands-on expertise in security controls, audits, and incident response to safeguard the company and its clients.