Vulnerability Risk & Security Engineer (Hybrid)

NTT Ltd Group Services United Kingdom Limited; Singapore; Híbrido; SGD 90.000 - 130.000; Jornada completa

Descripción de la vacante

NTT DATA is seeking an IT Security Officer to support a hybrid on-premises and AWS security program. You will drive vulnerability management, maintain the Risk Register, and coordinate risk acceptance with stakeholders while overseeing day-to-day security operations including signature updates and vendor notifications.

The role requires 3–5+ years in IT security operations with strong analytical and communication skills, and will involve working with SMEs and leadership to prioritize remediation

Formación

• Bachelor's degree or equivalent work experience in information security.
• Hands-on experience with vulnerability scanning tools (Tenable/Nessus, Qualys, Rapid7).
• Working knowledge of AWS security services and shared responsibility model.
• Understanding of on-premises infrastructure security and CVSS scoring.

Responsabilidades

• Execute regular vulnerability scans on on-premises and AWS environments.
• Generate and distribute vulnerability reports to technical teams and leadership.
• Track remediation status and escalate overdue items per SLAs.
• Maintain and review the Risk Register; draft risk acceptance forms.
• Coordinate risk acceptances with stakeholders for formal sign-off.
• Oversee security signature updates and vendor vulnerability notifications.
• Perform CVSS-based risk analysis and prioritize remediation efforts.
• Prepare periodic vulnerability and risk dashboards for leadership.

Conocimientos

Vulnerability management

Risk management

Stakeholder management

Security operations

CVSS scoring

GRC tools

AWS security services

Vendor management

Educación

Bachelor's degree in Information Security / related field

Herramientas

Tenable/Nessus

Qualys

Rapid7

ServiceNow GRC

Archer

AWS Security Services

Descripción del empleo

NTT DATA is seeking an IT Security Officer to support a hybrid on-premises and AWS security program. You will drive vulnerability management, maintain the Risk Register, and coordinate risk acceptance with stakeholders while overseeing day-to-day security operations including signature updates and vendor notifications.

The role requires 3–5+ years in IT security operations with strong analytical and communication skills, and will involve working with SMEs and leadership to prioritize remediation