Security Consultant (GRC)

NTT America, Inc.; London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading global security service provider in London is seeking a passionate Security Consultant (GRC) to govern cyber security and manage data protection. The ideal candidate will have over 3 years of experience in information security, compliance, and risk management and possess strong communication skills. This role includes developing policies and engaging with stakeholders, fostering continuous improvement in security practices. The company values diversity and provides tailored benefits for employee wellbeing.

Benefits

Flexible work options

Continuous learning opportunities

Qualifications

• 3+ years' experience in information security, data protection, risk management, or compliance.
• Strong understanding of risk frameworks and compliance standards.
• Certifications like CISA, CRISC, or CISSP are advantageous.

Responsibilities

• Govern and manage enterprise-level cyber and information security.
• Develop and maintain organizational cyber security policies.
• Establish and monitor controls to safeguard data and assets.

Skills

Information security

Risk management

Compliance

Stakeholder engagement

Data protection

Excellent communication skills

Tools

ISO 27001

NIST 800-53

GDPR compliance

Job description

The team you'll be working with:

Security Consultant (GRC)

NTT DATA is one of the world’s largest global security service providers, partnering with some of the most recognized security technology brands. We’re looking for passionate, curious, and motivated individuals to join our team.

What you'll be doing:

• Using your background in Governance, Risk & Compliance, you will help our clients:
• Governance: directs, oversees, designs, implements or operates within the set of multi-disciplinary structures, policies, procedures, processes and controls to manage cyber and information security at an enterprise level, supporting regulatory, legal, risk, environmental, and operational requirements.
• Policy and Procedure Management: develops or maintains organisational cyber and information security policies, standards, and processes, applying recognised standards (e.g., ISO/IEC 27000, NIST CSF).
• Risk Management: develops strategies and controls for cyber and information security, assessing vulnerabilities and risks based on assets, threats, impacts, and costs.
• Data Privacy: manages policies and controls for personal data protection, ensuring compliance with GDPR, Data Protection laws, etc.
• Internal Controls Oversight: establishes and monitors controls to safeguard data and assets, conducting reviews and audits.
• Stakeholder Engagement: acts as a liaison, providing guidance, support, and reporting on remediation activities.
• Continuous Improvement: identifies process enhancements, tests security controls, and documents compliance levels.

What experience you'll bring:

• 3+ years' experience in information security, data protection, risk management, or compliance roles.
• Strong understanding of frameworks such as ISO 27001, NIST 800-53 / CSF, NIS/NIS2, DORA, UK CNI / OT / IIOT compliance.
• Experience working with external stakeholders like clients, vendors, auditors, and regulators.
• Leadership skills to guide and mentor teams and influence stakeholders.
• Ability to balance strategic and hands-on security tasks.
• Excellent communication skills for presenting complex topics to diverse audiences.
• Legal right to work in the UK and eligibility for UK SC clearance.
• Certifications like CISA, CRISC, CISM, or CISSP are advantageous.

Who we are:

We are a global organization that empowers local teams, undertaking impactful work with a diverse and inclusive environment, fostering collaboration, growth, and innovation.

For more information on Diversity, Equity, and Inclusion, please visit: Creating Inclusion Together at NTT DATA UK

What we'll offer you:

We provide tailored benefits supporting your wellbeing, continuous learning, and flexible work options. Learn more at NTT DATA UK & Ireland.

We are committed to diversity and inclusion, guaranteeing interviews for applicants with disabilities who meet role requirements and offering reasonable adjustments during recruitment.