Security Compliance Manager

NTT Limited; Singapore; Sur place; SGD 70 000 - 110 000; Plein temps

Résumé du poste

NTT DATA is recruiting an Information Security Analyst to protect the organization’s networks from cyber threats and to help establish security standards. The role involves monitoring alerts, implementing controls, and supporting vulnerability management in a global IT environment.

Qualified candidates will hold a degree in information security or related fields and possess certifications such as CISSP/CISM or Security+.

Qualifications

• Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related.

Responsabilités

• Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.
• Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.
• Performs regular vulnerability assessments, analyses scan results, and assists in prioritizing and remediating identified vulnerabilities.
• Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.
• Assists in ensuring compliance with industry standards (e.g., GDPR, ISO 27001) by conducting assessments and implementing necessary controls.
• Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Documents security breaches and assess the damage they cause.
• Works with the security team to perform tests and uncover network vulnerabilities.
• Fixes detected vulnerabilities to maintain a high-security standard.
• Develops organizational best practices for IT security.
• Performs penetration testing and upgrades systems to enable security software.
• Installs and upgrades antivirus software and tests and evaluates new technology.
• Assists with the installation of security software and understands information security management.
• Researches security enhancements and makes recommendations to management.
• Stays abreast of information technology trends and security standards.
• Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.
• Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.
• Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.
• Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organization.
• Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organization's processes and projects.

Connaissances

Communication skills

Analytical thinking

Risk assessment

Network vulnerabilities

Firewall/IDS/IDPS

Patch management

macOS/Windows

Security frameworks

Independent work

Formation

Bachelor's degree in information security/cybersecurity/computer science

Outils

Firewalls

Proxies

SIEM

Antivirus

IDS/IPS

Description du poste

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Information Security Analyst is a seasoned subject matter expert, responsible for protecting the organization's computer networks from cyber-attacks, and to help set and maintain security standards. This role is required to monitor the organization's computer networks for security issues, install security software, and document any security issues or breaches found. The Information Security Analyst is responsible for assisting in the planning, implementation, and management of information security measures to safeguard the organization's digital assets and systems and contributes to maintaining a secure and compliant environment.

Key responsibilities:

• Monitors security alerts and events from various sources, investigates potential threats, and escalates incidents as necessary.
• Assists in the implementation and monitoring of security controls, including firewalls, intrusion detection systems, and access controls.
• Performs regular vulnerability assessments, analyses scan results, and assists in prioritizing and remediating identified vulnerabilities.
• Supports the incident response team in investigating security incidents, documenting findings, and participating in remediation efforts.
• Assists in ensuring compliance with industry standards (for example, GDPR, ISO 27001) by conducting assessments and implementing necessary controls.
• Installs security measures and operates software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Documents security breaches and assess the damage they cause.
• Works with the security team to perform tests and uncover network vulnerabilities.
• Fixes detected vulnerabilities to maintain a high-security standard.
• Develops organizational best practices for IT security.
• Performs penetration testing and upgrades systems to unable security software.
• Installs and upgrades antivirus software and tests and evaluates new technology.
• Assists with the installation of security software and understands information security management.
• Researches security enhancements and makes recommendations to management.
• Stays abreast of information technology trends and security standards.
• Contributes to security awareness initiatives by creating training materials, conducting workshops, and educating employees about best security practices.
• Maintains accurate records of security incidents, assessments, and actions taken for reporting and audit purposes.
• Assists in the management and maintenance of security tools, including antivirus software, encryption tools, and security information and event management (SIEM) systems.
• Participates in risk assessments to identify potential security threats, vulnerabilities, and associated risks to the organization.
• Collaborates with cross-functional teams, IT, and other teams to ensure security measures are integrated into the organization's processes and projects.
• Performs any other related task as required.

To thrive in this role, you need to have:

• Excellent communication skills to effectively convey technical information to non-technical stakeholders.
• Excellent analytical thinking and problem-solving skills to prevent hacking on a network.
• Ability to identify and evaluate potential risks and to develop solutions.
• Ability to identify and mitigate network vulnerabilities and explain how to avoid them.
• Seasoned proficiency in understanding of firewalls, proxies, SIEM, antivirus, and IDPS concepts.
• Seasoned proficiency in understanding of patch management with the ability to deploy patches in a timely manner whilst understanding business impact.
• Seasoned proficiency with MAC and OS.
• Seasoned familiarity with security frameworks, standards, and regulations (for example, NIST, CIS, GDPR).
• Seasoned proficiency of understanding in network and system architecture, protocols, and security controls.
• Strong analytical skills to analyze security incidents and assess potential risks.
• Ability to work both independently and collaboratively in a fast-paced environment.

Academic qualifications and certifications:

• Bachelor's degree or equivalent in information security, cybersecurity, computer science, or related.
• Security certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) are advantageous.

Required experience:

• Seasoned demonstrated experience in information security or cybersecurity, or related roles.
• Seasoned demonstrated experience working in a global IT organization.
• Seasoned demonstrated experience with computer network penetration testing and techniques.
• Seasoned demonstrated experience with security assessment and vulnerability scanning tools.

Workplace type: On-site Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D. Equal Opportunity Employer NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.

Is innovation part of your DNA?

We’ve combined the capabilities of 28 remarkable companies to become one, leading technology services provider. Together, we help our people, clients, and communities do great things with technology to create a more secure and connected future. We employ 40,000 people across 57 countries. By bringing together the world’s best technology companies and emerging innovators, we work together to deliver sustainable outcomes to businesses and the world. Innovation is part of our DNA. We believe it’s key to what makes us different. So, we strive to move forward, challenge the status quo, and drive excellence through the technologies we integrate and the services we deliver around the world. The result is connected cities, connected factories, connected healthcare, connected agriculture, connected conservation, connected mobility, and connected sport. Together we enable the connected future. You’ll be joining a global employer that is committed to attracting, growing and keeping the best talent. A place where you will be at the heart of our success!