Security Consultant

NTT Limited; Petaling Jaya; On-site; MYR 150,000 - 230,000; Full time

Job summary

NTT DATA is seeking a Security Consultant to lead cyber resilience and security advisory engagements. The role shapes assessments, MVC advisory workstreams, and security architecture within infrastructure programs to help regulated clients withstand and recover from cyber events.

You will conduct threat assessments, develop recovery designs, and lead workshops with client executives. Strong knowledge of NIST, ISO27001, CIS controls, and regulatory requirements is essential.

Qualifications

• Bachelor’s degree or diploma in Information Technology, Computer Science, Engineering, or a related field.
• Industry certifications such as CISSP, CISM, or CISA are essential.
• Demonstrated experience with ISO/IEC 27001, NIST, CIS and regulatory baselines.

Responsibilities

• Lead security assessments, cyber resilience and MVC advisory engagements.
• Conduct threat and vulnerability assessments and recovery design workstreams.
• Develop proposals with defined methodology, deliverables and acceptance criteria.
• Present findings to senior stakeholders and CISOs.
• Coordinate with client teams to define recovery priorities and dependencies.

Skills

CISSP

CISM

CISA

CRISC

SABSA

ISO 27001 Lead Auditor

ISO 27001 Lead Implementer

PCNSE

NSE 4+

PAM/IAM

Education

Bachelor’s degree or diploma in IT/Engineering

Tools

PCNSE

NSE 4+

SIEM

EDR/XDR

PAM/IAM

CBCP

ISO 22301

Job description

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Role purpose

The Security Consultant leads the practice’s cyber resilience and security advisory portfolio. The role shapes and delivers security assessments, cyber recovery and minimum viable company (MVC) advisory engagements, and security architecture workstreams within broader infrastructure programs, helping regulated clients withstand, respond to, and recover from destructive cyber events.

Key responsibilities

• Works on strategic engagements that ensure the efficient and effective reaction to security breaches to mitigate immediate and potential threats.
• Uses mitigation, preparedness, response, and recovery approaches to minimize business disruptions and commercial consequences.
• Shapes and scopes security advisory opportunities, including cyber resilience assessments, minimum viable company definition, cyber recovery design, and security posture assessments.
• Develops proposals and statements of work with clearly defined methodology stages, deliverables, stakeholder models, and acceptance criteria.
• Leads security and resilience assessments using recognized frameworks (NIST CSF, CIS Controls, ISO/IEC 27001) and regulatory baselines (BNM RMiT, MAS TRM, NACSA/NCII requirements, PDPA).
• Conducts regular threat and vulnerability assessments and determines deviations from acceptable configurations or policies.
• Participates in the assessment of the level of risk and supports the development of appropriate mitigation countermeasures in operational and non-operational situations.
• Defines minimum viable company scope for clients by identifying critical business services, mapping supporting applications and infrastructure, and establishing recovery priorities and dependencies.
• Designs cyber recovery architectures, including isolated recovery environments, cleanroom recovery, immutable vaulting, and recovery validation processes.
• Leads data protection and resilience assessments (ransomware recovery readiness) and supports the design and build of disaster recovery sites and cyber resilience third sites.
• Develops business impact analyses (BIA), business continuity plans (BCP), disaster recovery plans (DRP), and cyber incident recovery plans (CIRP/CRP).
• Develops incident response and recovery playbooks and designs and facilitates tabletop exercises with client executive and technical teams.
• Participates in the implementation of policies, processes, and guidelines to ensure the standardization of security management throughout client organizations.
• Advises on security architecture within infrastructure programs, including network segmentation and micro segmentation, identity and privileged access management, endpoint and workload protection, and security monitoring integration.
• Presents security findings and recommendations to CISO-level and board-level audiences.

To thrive in this role

• Excellent verbal and written communication skills are a must, including confident presentation to IT management and C-level audiences.
• Proven ability to gather business requirements and translate them into technical requirements.
• Proven ability to translate technical requirements into a compelling solution proposal.
• A solution-centric rather than product-centric mindset, recommending the approach that best meets the client’s requirements.
• Strong document authoring capability, covering assessment reports, proposal documents, requirements documents, and solution specifications.
• Proven ability to conduct workshops and stakeholder interviews, gather and structure information, and produce assessment reports and findings from raw data such as logs, configurations, and inventory.
• Strong understanding of information technology and information security.
• Solid understanding of security risks and preventative controls.
• Excellent understanding of security operational processes and controls.
• Good knowledge of security frameworks and standards such as NIST, ISO/IEC 27001, and CIS.
• Good ability to assess and manage cybersecurity risks at both organisational and project levels.
• Strong understanding of cyber resilience and recovery concepts, including business impact analysis, recovery objectives, immutability, air-gapped vaulting, and clean recovery.
• Service consulting aptitude, focusing on the business, service, and sales aspects.
• Ability to translate technical risk into business language and defensible recommendations.
• Up-to-date knowledge of security threats, countermeasures, security tools, and network technologies.
• High level of drive and the ability to work under pressure.
• Ability to build and maintain cross-functional relationships with a variety of stakeholders.
• Understanding of relevant laws, regulations, and compliance frameworks affecting regulated industries in ASEAN, including BNM RMiT, MAS TRM, and PDPA.

Academic qualifications and certifications

• Bachelor’s degree or diploma, or equivalent, in Information Technology, Computer Science, Engineering, or a related field.
• Industry relevant certifications such as CISSP, CISM, or CISA essential.
• CRISC, SABSA, ISO/IEC 27001 Lead Auditor/Lead Implementer, CCSP, vendor certifications (Palo Alto Networks PCNSE, Fortinet NSE 4+), and business continuity certifications (CBCP, ISO 22301) advantageous.

Desirable experience

• Demonstrable experience in the information security industry, with substantial experience in security consulting or advisory roles, ideally serving financial services or other regulated industries.
• Experience with security architecture design principles.
• Experience with industry compliance and standards such as ISO/IEC 27001, NIST, BNM RMiT, MAS TRM, and PDPA, including support for audit or regulator interactions.
• Experience leading security maturity or gap assessments and presenting findings to senior stakeholders.
• Experience with enterprise security technologies, including next-generation firewalls (Palo Alto Networks, Fortinet, Check Point), SIEM/SOAR, EDR/XDR, PAM/IAM, and data protection controls.

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future. You’ll be joining a global employer that is committed to attracting, growing and keeping the best talent. A place where you will be at the heart of our success!

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category.