Information Security Analyst

NTT MSC Sdn Bhd; Selangor; Hybrid; MYR 60,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Job summary

NTT DATA in Malaysia seeks an Information Security Analyst to monitor networks, implement controls, and respond to incidents. You will work with the security team to maintain GDPR/ISO 27001-aligned measures, conduct vulnerability assessments, and support audit reporting.

The role requires strong communication, analytical skills, and hands-on experience with firewalls, SIEM, and patch management. Hybrid working arrangements apply, and you will collaborate with cross-functional teams to strengthen

Qualifications

• Bachelor's degree in information security, cybersecurity, computer science, or related field.
• Security certifications such as CISSP, CISM, or CompTIA Security+ are advantageous.

Responsibilities

• Monitor security alerts and events, investigate threats, and escalate incidents as needed.
• Assist in implementing and monitoring security controls including firewalls, IDS/IPS, and access controls.
• Perform vulnerability assessments and prioritize remediation.
• Support incident response activities and document findings for audits.
• Ensure compliance with standards (e.g., GDPR, ISO 27001) by conducting assessments and applying controls.

Skills

Security monitoring

Incident response

Vulnerability assessment

Penetration testing

Network security

Analytical thinking

Communication skills

Education

Bachelor's degree in information security / cybersecurity

Security certifications such as CISSP / CISM / CompTIA Security+

Tools

SIEM

Firewalls

IDS/IPS

Encryption tools

Antivirus software

Job description

Make an impact with NTT DATA

Your Day at NTT DATA

The Information Security Analyst is a seasoned subject matter expert, responsible for protecting the organization’s computer networks from cyber-attacks, and to help set and maintain security standards. This role is required to monitor the organization’s computer networks for security issues, install security software, and document any security issues or breaches found. The Information Security Analyst is responsible for assisting in the planning, implementation, and management of information security measures to safeguard the organization’s digital assets and systems and contributes to maintaining a secure and compliant environment.

Key Responsibilities

• Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.
• Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.
• Performs regular vulnerability assessments, analyses scan results, and assists in prioritizing and remediating identified vulnerabilities.
• Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.
• Assists in ensuring compliance with industry standards (for example, GDPR, ISO 27001) by conducting assessments and implementing necessary controls.
• Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Documents security breaches and assess the damage they cause.
• Works with the security team to perform tests and uncover network vulnerabilities.
• Fixes detected vulnerabilities to maintain a high-security standard.
• Develops organizational best practices for IT security.
• Performs penetration testing and upgrades systems to unable security software.
• Installs and upgrades antivirus software and tests and evaluates new technology.
• Assists with the installation of security software and understands information security management.
• Researches security enhancements and makes recommendations to management.
• Stays abreast of information technology trends and security standards.
• Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.
• Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.
• Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.
• Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organization.
• Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organization’s processes and projects.
• Performs any other related task as required.

To Thrive in This Role, You Need to Have

• Excellent communication skills to effectively convey technical information to non-technical stakeholders.
• Excellent analytical thinking and problem-solving skills to prevent hacking on a network.
• Ability to identify and evaluate potential risks and to develop solutions.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Seasoned proficiency in understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
• Seasoned proficiency in understanding of patch management with the ability to deploy patches in a timely manner whilst understanding business impact.
• Seasoned proficiency with MAC and OS.
• Seasoned familiarity with security frameworks, standards, and regulations (for example, NIST, CIS, GDPR).
• Seasoned proficiency of understanding in network and system architecture, protocols, and security controls.
• Strong analytical skills to analyze security incidents and assess potential risks.
• Ability to work both independently and collaboratively in a fast-paced environment.

Academic Qualifications and Certifications

• Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related.
• Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous.

Required Experience

• Seasoned demonstrated experience in information security or cybersecurity, or related roles.
• Seasoned demonstrated experience working in a global IT organization.
• Seasoned demonstrated experience with computer network penetration testing and techniques.
• Seasoned demonstrated experience with security assessment and vulnerability scanning tools.

Workplace Type

Hybrid Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.