Lead Cyber Resilience & Security Advisory Consultant

NTT DATA; Kuala Selangor; Presencial; MYR 120.000 - 180.000; Jornada completa

Descripción de la vacante

NTT DATA seeks a Security Consultant to lead cyber resilience and security advisory workstreams. You will shape assessments, recover design, and MVC engagements for regulated clients, while guiding security architecture and policy implementation across infrastructure programs.

You will drive threat and vulnerability assessments, create recovery plans, and present findings to executive audiences, leveraging blueprints like NIST CSF and ISO/IEC 27001.

Formación

• Bachelor’s degree or diploma in IT, CS, Engineering, or related field.
• Industry certs such as CISSP, CISM, CISA are essential.
• Certifications like CRISC, SABSA, ISO/IEC 27001 Lead Auditor/Lead Implementer, CCSP are advantageous.

Responsabilidades

• Lead security and resilience assessments using frameworks (NIST CSF, CIS Controls, ISO/IEC 27001).
• Define MVC scope, recovery priorities, and dependencies for clients.
• Develop proposals and SOWs with clear methodology, deliverables, and acceptance criteria.
• Present findings and recommendations to CISO-level and board audiences.
• Conduct threat and vulnerability assessments and determine policy deviations.
• Design cyber recovery architectures including isolated environments and vaulting.
• Develop BIA, BCP, DRP, and CIRP/CRP documents and tabletop exercise playbooks.
• Advise on security architecture within infra programs and network segmentation.

Conocimientos

Verbal communication

Written communication

Requirements gathering

Proposal development

Stakeholder interviews

Security architecture

Cyber resilience

Threat assessment

Business continuity planning

Incident response

Educación

Bachelor’s degree in IT/CS/Engineering

CISSP

CISM

CISA

CRISC

SABSA

ISO/IEC 27001 Lead Auditor/Lead Implementer

CCSP

PCNSE, Fortinet NSE 4+

CBCP or ISO 22301

Descripción del empleo

NTT DATA seeks a Security Consultant to lead cyber resilience and security advisory workstreams. You will shape assessments, recover design, and MVC engagements for regulated clients, while guiding security architecture and policy implementation across infrastructure programs.

You will drive threat and vulnerability assessments, create recovery plans, and present findings to executive audiences, leveraging blueprints like NIST CSF and ISO/IEC 27001.