Global Capability Lead - DFIR and Crisis Response

Dimension Data Solutions Limited (Kenya); Karnataka; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

NTT DATA in India seeks a Senior Director, Information Security to lead the security program, governance, and risk management across the organization. You will set strategy, policies and drive compliance with global standards.

You will collaborate with executives, manage audits, oversee incident response, and build a high-performing security team dedicated to protecting digital assets and enabling scalable business operations.

Qualifications

• Bachelor's degree or equivalent in business administration or technology-related field.
• MBA or IT-related master's with a security focus preferred.
• Related cybersecurity, risk management and data privacy certifications preferred such as CISSP, CISM, CISA, CEH.

Responsibilities

• Develop and drive the organization's information security strategy aligned with business objectives.
• Establish and maintain information security policies, procedures, standards, and guidelines.
• Oversee risk identification, assessment and management across data, systems, networks and third parties.
• Promote security awareness through training and regular communications.
• Develop and execute incident response plans to address security incidents.
• Ensure compliance with relevant security regulations and industry standards.
• Assess and select appropriate security technologies to protect digital assets.
• Implement security monitoring tools and provide regular reports to leadership.
• Stay informed on emerging threats and industry trends to enhance security posture.
• Evaluate third-party vendor risk and implement mitigation strategies.
• Coordinate internal and external security audits and assessments.
• Provide guidance and leadership to the information security team.

Skills

Security frameworks

Compliance knowledge

Security technologies

Communication

Leadership

Strategic thinking

Business acumen

Decision making

Education

Bachelor's degree or equivalent

MBA or IT-related master’s with security focus

Cybersecurity certifications (preferred)

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.

Your day at NTT DATA

The Senior Director, Information Security is a leadership role that supports the business in overseeing and driving organizational information security and governance strategy, frameworks, policies and practices enabling a risk-free and scalable business operations.

This role plays an important role in safeguarding the company's information assets, ensuring compliance with security legislations, and protecting against cyber threats.

The Senior Director, Information Security collaborates with cross functional teams, executive leadership and other stakeholders to establish and maintain a robust and proactive information security posture whilst fostering a collaborative and innovative team culture focused on operational excellence.

Key responsibilities

• Contributes towards the development and drives the implementation of an organization-wide information security strategy aligned with the NTT's business objectives.
• Contributes towards establishing and maintaining information security policies, procedures, standards, and guidelines that comply with industry best practices and regulatory requirements.
• Oversees the identification, assessment and management of information security risks across the organization, including data, systems, networks, and third-party relationships.
• Promotes a culture of security awareness among employees through training, education, and regular communication.
• Oversees the development and execution of incident response plans to effectively address and mitigate security incidents.
• Ensures organizational compliance with relevant security regulations, laws, and industry standards.
• Assesses and selects appropriate security technologies and solutions to protect NTT's digital assets.
• Implements security monitoring tools and systems to detect and respond to security threats and providing regular reports to executive leadership and stakeholders.
• Stays informed about emerging security threats and industry trends to continuously enhance the organization's security posture.
• Evaluates security risks associated with third-party vendors and service providers and implementing risk mitigation strategies.
• Effectively communicates security incidents, responses, and mitigation efforts to relevant stakeholders.
• Coordinates and manages internal and external security audits and assessments.
• Provides guidance and leadership to the information security team, ensuring adherence to security policies and procedures.

To thrive in this role, you need to have

• Significantly vast knowledge of security frameworks and standards (for example, ISO 27001, NIST, CIS, etc.).
• Significantly vast knowledge about PCI, HIPAA, NIST, GLBA and SOX compliance assessments.
• Significantly vast understanding of security technologies, tools, and best practices.
• Excellent communication and presentation skills with the ability to effectively convey complex security concepts to non-technical stakeholders.
• Significantly vast leadership and team management skills to lead and motivate a diverse security team.
• Strategic thinking and problem-solving abilities with a focus on delivering results.
• Significantly vast business acumen and the ability to align security objectives with overall business objectives.
• Significantly vast understanding of and knowledge for business needs and a commitment to lead the information security team in delivering high-quality, prompt, and efficient service to the business.
• Significantly vast decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.

Academic qualifications and certifications

• Bachelor's degree or equivalent in business administration or a technology-related field such computer science or information technology or related preferred.
• An advanced degree such as an MBA or Masters in an IT related field with a security focus preferred.
• Related Cybersecurity, risk management and data privacy certifications preferred such as CompTIA Security+, CISSP, CISM, CISA, and/or CEH.

Required experience

• Significantly vast demonstrated experience in a combination of risk management, information security and IT roles in a global organization.
• Proven track record of successfully developing and implementing enterprise-wide information security strategies and initiatives.
• Significantly vast demonstrated experience with contract and vendor negotiations and management.
• Substantial demonstrated experience in Agile (scaled) software development or other best in class development practices.
• Significantly vast demonstrated experience with Cloud computing / Elastic computing across virtualized