GRC & Security Assurance Lead

NTT Ltd.; Greater London; Sur place; GBP 70 000 - 100 000; Plein temps

Résumé du poste

NTT DATA in the United Kingdom seeks a GRC Consultant (Cyber Assurance / Security Operations Manager) to ensure security controls are in place and operate as designed, aligning risk to business posture across the lifecycle.

You will lead governance, risk and compliance activities, manage security incidents and drive continuous improvement within ISO 27001 and cloud security practices in a collaborative, multi-line of defence environment.

Qualifications

• Experience delivering security solutions for large-scale infrastructure or transformation programmes.
• Knowledge of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF.
• Good networking knowledge (switching, routing, firewalls).
• Understanding of security testing and vulnerability management (e.g., pen testing/ITHC, CVSS/CVE).
• Experience with ISO 27001 family standards.

Responsabilités

• Provide security expertise across standards and measure control effectiveness.
• Develop Information Security Management Plans incorporating regulatory and compliance needs.
• Identify risks and mitigation plans for cyber threats and vulnerabilities.
• Work with Service Management to ensure partner and supplier compliance.
• Lead governance, risk and compliance initiatives aligned to policy and industry good practice.
• Coordinate audits, ITHC and risk assurance activities to evidence compliance.

Connaissances

Security frameworks

NIST CSF

Threat intelligence

Penetration testing

Networking knowledge

ISO 27001

Formation

CISSP

CISM

CCSP

CRISC

Description du poste

NTT DATA in the United Kingdom seeks a GRC Consultant (Cyber Assurance / Security Operations Manager) to ensure security controls are in place and operate as designed, aligning risk to business posture across the lifecycle.

You will lead governance, risk and compliance activities, manage security incidents and drive continuous improvement within ISO 27001 and cloud security practices in a collaborative, multi-line of defence environment.