Security Apps Lead

NTT Ltd.; Riyadh; On-site; SAR 150,000 - 210,000; Full time

Job summary

NTT DATA in Riyadh is seeking a Security Apps Lead to oversee organizational information security programs and governance. You will align security strategy with business objectives, coordinate risk management, incident response, and audits while fostering a culture of security excellence.

The role requires strong knowledge of ISO 27001, NIST, CIS, and experience in cross-functional leadership, vendor management, and regulatory compliance across global setups. On-site work.

Qualifications

• Solid knowledge of security frameworks and standards (ISO 27001, NIST, CIS)
• Strong understanding of security technologies, tools and best practices
• Excellent communication and presentation skills to non-technical stakeholders
• Developing team management skills to lead a diverse security team
• Good problem-solving abilities with results focus
• Good business acumen and ability to align security with strategic objectives

Responsibilities

• Provides operational management in implementing an organization-wide information security strategy aligned with business objectives.
• Maintains and implements information security policies, procedures, standards and guidelines.
• Coordinates identification, assessment and management of information security risks across the organization.
• Promotes security awareness among employees through training and communications.
• Coordinates execution of incident response plans to address security incidents.
• Ensures compliance with relevant security regulations, laws and industry standards.
• Assists with selecting and implementing security technologies and solutions.
• Implements security monitoring tools and reports to senior leadership.
• Stays informed about emerging threats and trends to enhance security posture.
• Communicates security incidents and mitigation efforts to stakeholders.
• Coordinates internal and external security audits and assessments.
• Provides guidance to the information security team and ensures policy adherence

Skills

Security frameworks

Security technologies

Clear communication

Team leadership

Problem solving

Business acumen

Education

Bachelor's degree (business administration or IT)

Job description

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Security Apps Lead is a developing management role, responsible for operationally managing organizational information security program(s).

This role plays an important role in managing the implementation of company security and governance strategy, frameworks, policies, and practices enabling a risk-free and scalable business operations.

The Security Apps Lead collaborates with cross functional teams, and management, and other stakeholders to maintain a robust and proactive information security posture whilst fostering a collaborative and innovative team culture focused on operational excellence.

Key responsibilities:

• Provides operational management in the implementation of an organization-wide information security strategy aligned with business objectives.
• Maintains and implements information security policies, procedures, standards, and guidelines that comply with industry best practices and regulatory requirements.
• Coordinates the identification, assessment and management of information security risks across the organization, including data, systems, networks, and third-party relationships.
• Promotes a culture of security awareness among employees through training, education, and regular communication.
• Coordinates the execution of incident response plans to effectively address and mitigate security incidents.
• Ensures company’s compliance with relevant security regulations, laws, and industry standards.
• Assists with assessing and selecting and selects appropriate security technologies and solutions to protect company digital assets.
• Implements security monitoring tools and systems to detect and respond to security threats and providing regular reports to senior leadership and stakeholders.
• Stays informed about emerging security threats and industry trends to continuously enhance the organization’s security posture.
• Effectively communicates security incidents, responses, and mitigation efforts to relevant stakeholders.
• Coordinates and manages internal and external security audits and assessments.
• Provides guidance, management to the information security team, ensuring adherence to security policies and procedures.

To thrive in this role, you need to have:

• Solid knowledge of security frameworks and standards (e.g., ISO 27001, NIST, CIS, etc.).
• Solid understanding of security technologies, tools, and best practices.
• Excellent communication and presentation skills with the ability to effectively convey complex security concepts to non-technical stakeholders.
• Developing team management skills to lead and motivate a diverse security team.
• Good problem-solving abilities with a focus on delivering results.
• Good business acumen and the ability to align security activities with overall security strategic objectives.

Academic qualifications and certifications:

• Bachelor’s degree or equivalent in business administration or a technology-related field required (e.g., computer science, information technology, etc.).
• Related Cybersecurity, risk management and data privacy certifications preferred: CompTIA Security+, CISSP, CISM, CISA, and/or CEH.

Required experience:

• Solid experience in a combination of risk management, information security and IT roles in a global organization.
• Solid experience with contract and vendor negotiations and management.
• Solid experience in Agile (scaled) software development or other best in class development practices.
• Solid experience with Cloud computing / Elastic computing across virtualized environments.
• Solid experience in risk management, compliance and regulatory requirements related to information security.
• Solid experience working with national and international regulatory compliance frameworks such as NIST, ISO, SOX, EU GDPR, CCPA and PCI DSS.
• Solid experience and working knowledge of the following areas of technical expertise - information policy formulation, information security management, business risk management, IT risk assessment and management, IT continuity management, IT governance formulation, and organizational change management, IT financial management and IT audit.

Workplace type:

On-site Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.