Information Security Manager/GRC Consultant

The Nippon Telegraph and Telephone Corporation (NTT); Birmingham; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

NTT DATA is seeking a GRC Consultant to join the Information Security team in a hybrid UK role (Birmingham or London). You will maintain ISMS per ISO 27001, conduct audits against TSA and other standards, and drive governance, risk management, and compliance across the organisation.

You will collaborate with internal stakeholders, analyze risks in projects, and deliver clear reports with improvement recommendations. Strong communication, analytical, and problem-solving skills are essential.

Qualifications

• Significant experience in Information Security and GRC.
• Strong understanding of risk management methodologies and international security standards (ISO 27001, US NIST, TSA, etc.).
• Familiarity with data privacy legislation such as EU GDPR.
• Experience maintaining and auditing Information Security Management Systems (ISMS) in line with ISO 27001.
• Customer service-oriented with the ability to build strong relationships with internal stakeholders.
• Analytical and creative thinking skills, with the ability to identify pragmatic solutions.
• The ability to organize the daily work schedule and delegate where necessary.

Responsibilities

• Maintain the Information Security Management System (ISMS) in accordance with ISO 27001.
• Conduct audit against Telecommunications Security Act (TSA) and other applicable local and regional compliance standards.
• Analyze and evaluate internal projects to identify risks and define appropriate compensatory measures.
• Prepare and present reports on information security including areas for improvement.
• Manage and update content for the information security awareness platform for employees and key suppliers, ensuring up-to-date training on information and cybersecurity best practices.
• Research and recommend security enhancements and improvements.

Skills

Information Security

GRC

Risk Management

ISO 27001

NIST

GDPR

Stakeholder Management

Job description

What you'll be doing:

GRC Consultant

Hybrid variable Birmingham OR London

We are looking for a Information Security manager/GRC Consultant, you will play a key role in the 'IT Security team' protecting the organisation against information security threats. This includes maintaining existing security measures while continuously enhancing our governance, risk management and compliance (GRC) frameworks and policies. You will work closely with the 'Information Security Steering Team' and cross-functional departments to ensure it is compliant with regulatory requirements and protected from evolving threats.

Roles & responsibilities

• Maintain the Information Security Management System (ISMS) in accordance with ISO 27001
• Conduct audit against Telecommunications Security Act (TSA) and other applicable local and regional compliance standards.
• Analyze and evaluate internal projects to identify risks and define appropriate compensatory measures
• Prepare and present reports on information security including areas for improvement
• Manage and update content for the information security awareness platform for employees and key suppliers, ensuring up-to-date training on information and cybersecurity best practices
• Research and recommend security enhancements and improvements

What experience you'll bring

Mandatory skills

• Significant experience in Information Security and GRC
• Strong understanding of risk management methodologies and international security standards (e.g., ISO 27001, US NIST, TSA, etc.) and the ability to assess risks, identify vulnerabilities, etc.
• Familiarity with data privacy legislation such as EU GDPR
• Experience maintaining and auditing Information Security Management Systems (ISMS) in line with ISO 27001
• Customer service-oriented with the ability to build strong relationships with internal stakeholders
• Analytical and creative thinking skills, with the ability to identify pragmatic solutions
• The ability to organize the daily work schedule and delegate where necessary

Who we are

At NTT DATA, you have endless opportunities to think big, act bold and take ownership. As a $30+ billion business and technology services, AI and digital infrastructure leader, we co-innovate solutions with clients and partners globally for business and societal impact. Serving 75% of the Fortune Global 100, with experts in over 70 countries, we encourage experimentation and recognize great work. Proudly a Global Top Employer, NTT DATA is part of NTT Group, which invests over $3 billion annually in R&D. Make this the place where you belong, learn, and build your network. Make this the place where you grow.

what we'll offer you

• We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing.
• Our Learning and Development team ensure that there are continuous growth and development opportunities for our people.
• We also offer the opportunity to have flexible work options.

You can find more information about NTT DATA UK & Ireland here: https://uk.nttdata.com/

We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.