Principal Consultant-Cybersecurity

NTT DATA, Inc.; Kuala Selangor; Hybrid; MYR 180,000 - 300,000; Full time

Job summary

NTT DATA, Inc. is seeking a Principal Security Consultant to translate clients’ cybersecurity requirements into customized security solutions across systems and products. You will lead engagements, develop strategies, and oversee assessments and patching to minimize vulnerabilities.

You will mentor teams, guide security architecture, and coordinate incident response planning while staying ahead of trends and regulatory changes in a global environment.

Qualifications

• Bachelor's degree or equivalent in IT/CS/Engineering.
• Industry certifications CISSP/CISM/CEH/GSEC or CompTIA Security+ essential.
• Extended experience in information security and security architecture.
• Experience with ISO 27000, PCI DSS, NIST, HIPAA and similar standards.

Responsibilities

• Serve as primary contact for key clients at C-level, managing relationships.
• Develop and implement cybersecurity strategies aligned with client objectives.
• Lead complex security consulting projects from start to finish.
• Oversee security assessments, risk assessments, pentesting, and audits.
• Guide on security controls architecture and deployment.

Skills

Cybersecurity principles

Project management

Client engagement

Communication skills

Strategic thinking

Education

Bachelor's degree in IT/CS/Engineering

CISSP / CISM / CEH / GSEC / CompTIA Security+

Tools

SANS Top 25

OWASP

NIST

Job description

Continue to make an impact with a company that is pushing the boundaries of what is possible. At NTT DATA, we are renowned for our technical excellence, leading innovations, and making a difference for our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can continue to grow, belong, and thrive.

Your career here is about believing in yourself and seizing new opportunities and challenges. It’s about expanding your skills and expertise in your current role and preparing yourself for future advancements. That’s why we encourage you to take every opportunity to further your career within our great global team.

Your day at NTT DATA

The Principal Security Consultant is a highly skilled expert, responsible for translating clients’ cybersecurity requirements and customizing and implementing security solutions into specific systems, applications and product designs.

This role identifies and develops the security solutions for clients using company products, outsourced technology solutions and technical tools. This role consults with clients regarding secure product configuration, deployment, and security patches to minimize security vulnerabilities.

In addition, this role provides comprehensive scanning, penetration testing, vulnerability assessments, monitoring services and source code analysis and delivers detailed results to clients. This role guides and supports clients in the development and implementation of product security controls.

Key responsibilities:

• Serves as the primary point of contact for key clients, building strong and lasting relationships with C-level executives and senior stakeholders.
• Develops and implements comprehensive cybersecurity strategies aligned with clients' business objectives, industry standards, and global best practices.
• Leads and manages complex, high-impact security consulting projects from initiation to completion, ensuring project success and client satisfaction.
• Provides expert oversight and guidance on security assessments, risk assessments, vulnerability assessments, penetration testing, and security audits.
• Leverages extensive expertise in various cybersecurity domains, including network security, application security, cloud security, and compliance, to guide and mentor consultants and contribute to thought leadership in the field.
• Leads the design and implementation of cutting-edge security solutions and architectures, collaborating with clients to configure and deploy security controls and technologies.
• Offers leadership and support in developing and testing incident response plans. Leads and coordinate responses to security incidents and assist clients in recovery efforts.
• Provides strategic guidance to clients on security-related decisions, investments, and initiatives. Assist in aligning security with overall business goals.
• Prepares and reviews highly detailed and technical reports, findings, recommendations, and remediation plans for clients.
• May mentor and develop junior consultants, fostering their growth and expertise within the organization.
• Stays at the forefront of cybersecurity trends, emerging threats, and industry best practices.

To thrive in this role, you need to have:

• Expert knowledge of cybersecurity principles, risk management, compliance standards, and advanced security technologies.
• Expert project management, and client engagement skills.
• Excellent written and verbal communication skills.
• Ability to convey complex technical information to non-technical stakeholders.
• Strategic thinking and the ability to develop and execute comprehensive security strategies aligned with business objectives.
• Good understanding of cybersecurity principles, technologies, threats, and best practices.
• Good knowledge of the technology industry, including trends, emerging technologies, and their potential impact on cybersecurity.
• Understanding of relevant laws, regulations, and compliance frameworks affecting the technology sector.
• Good ability to assess and manage cybersecurity risks at both organizational and project levels.
• Good knowledge of security frameworks and standards like NIST, ISO/IEC 27001, CIS, etc.

Academic qualifications and certifications:

• Bachelor's degree or equivalent in Information Technology or Computer Science or Engineering or related field.
• Industry relevant certifications such as CISSP, CISM, CEH, GSEC or CompTIA Security+ essential.

Required experience:

• Extended experience in the Information Technology Security Industry or relevant experience in similar role within a related environment.
• Extended experience with security architecture design principles.
• Extended experience with industry compliance and standards such as ISO 27000, PCI DSS, NIST, HIPAA or others.
• Extended experience with security tools and techniques to cover SANS Top 25, OWASP or others.
• Extended experience working in a multi-team environment across multiple geographies.

Workplace type:

Hybrid Working

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category.