InfoSec & GRC Manager (ISO 27001)

The Nippon Telegraph and Telephone Corporation (NTT); Birmingham; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

NTT DATA is seeking a GRC Consultant to join the Information Security team in a hybrid UK role (Birmingham or London). You will maintain ISMS per ISO 27001, conduct audits against TSA and other standards, and drive governance, risk management, and compliance across the organisation.

You will collaborate with internal stakeholders, analyze risks in projects, and deliver clear reports with improvement recommendations. Strong communication, analytical, and problem-solving skills are essential.

Qualifications

• Significant experience in Information Security and GRC.
• Strong understanding of risk management methodologies and international security standards (ISO 27001, US NIST, TSA, etc.).
• Familiarity with data privacy legislation such as EU GDPR.
• Experience maintaining and auditing Information Security Management Systems (ISMS) in line with ISO 27001.
• Customer service-oriented with the ability to build strong relationships with internal stakeholders.
• Analytical and creative thinking skills, with the ability to identify pragmatic solutions.
• The ability to organize the daily work schedule and delegate where necessary.

Responsibilities

• Maintain the Information Security Management System (ISMS) in accordance with ISO 27001.
• Conduct audit against Telecommunications Security Act (TSA) and other applicable local and regional compliance standards.
• Analyze and evaluate internal projects to identify risks and define appropriate compensatory measures.
• Prepare and present reports on information security including areas for improvement.
• Manage and update content for the information security awareness platform for employees and key suppliers, ensuring up-to-date training on information and cybersecurity best practices.
• Research and recommend security enhancements and improvements.

Skills

Information Security

GRC

Risk Management

ISO 27001

NIST

GDPR

Stakeholder Management

Job description

NTT DATA is seeking a GRC Consultant to join the Information Security team in a hybrid UK role (Birmingham or London). You will maintain ISMS per ISO 27001, conduct audits against TSA and other standards, and drive governance, risk management, and compliance across the organisation.

You will collaborate with internal stakeholders, analyze risks in projects, and deliver clear reports with improvement recommendations. Strong communication, analytical, and problem-solving skills are essential.