Security Operations & Risk Lead — Hybrid AWS/on‑Prem

NTT America, Inc.; Singapore; Remote; SGD 90.000 - 150.000; Vollzeit

Zusammenfassung

NTT DATA is seeking an IT Security Officer to support a customer’s information security program across hybrid on-prem and AWS environments. You will drive vulnerability management, manage the risk register, and oversee day-to-day security operations including signature updates and vendor vulnerability notices.

You will coordinate with SMEs and stakeholders to assess risks using CVSS, track remediation, and deliver risk-based recommendations for prioritization.

Qualifikationen

• Bachelor's degree in information security, CS, or related field.
• 3–5+ years in IT security operations, vulnerability mgmt, or risk mgmt.
• Hands-on with vulnerability scanning tools (Tenable/Nessus, Qualys, Rapid7).
• Knowledge of AWS security services and shared responsibility model.
• Strong CVSS understanding and risk-based prioritization.
• Experience creating and managing Risk Registers and risk acceptance docs.
• Excellent stakeholder management and cross-functional communication.

Aufgaben

• Drive vulnerability management lifecycle across on-premises and AWS environments.
• Maintain risk register, draft risk acceptance, and obtain formal sign‑off.
• Oversee security operations: signature updates, vendor bulletins, triage of issues.
• Provide risk-based recommendations to stakeholders for remediation prioritization.
• Prepare status reports and dashboards for leadership review.

Kenntnisse

Vulnerability management

AWS security

CVSS risk analysis

Risk management

Stakeholder communication

Security operations

Ausbildung

Bachelor's degree in information security or related field

Certs such as CISSP/CISA (preferred)

Tools

Tenable/Nessus

Qualys

Rapid7

AWS Security Hub

GuardDuty

Jobbeschreibung

NTT DATA is seeking an IT Security Officer to support a customer’s information security program across hybrid on-prem and AWS environments. You will drive vulnerability management, manage the risk register, and oversee day-to-day security operations including signature updates and vendor vulnerability notices.

You will coordinate with SMEs and stakeholders to assess risks using CVSS, track remediation, and deliver risk-based recommendations for prioritization.