Cyber Risk Consultant

NTT DATA North America; Charlotte (NC); On-site; USD 57,981 - 77,636; Full time

Job summary

NTT DATA seeks a senior cybersecurity risk professional to lead assessments, reviews, and governance for regulated financial services technology initiatives in Halifax, Canada. You will partner with technology teams, business stakeholders, and Cyber SMEs to evaluate risk, identify gaps, and provide actionable guidance throughout the project lifecycle.

The role includes supporting the AI Center of Excellence with cybersecurity risk evaluations for AI/ML and emerging tech, ensuring alignment with

Qualifications

• Minimum 7 years of hands-on experience in Cybersecurity Risk Management, Technology Risk, Information Security, or Cybersecurity Governance.
• Minimum 7 years of experience in Financial Services or other regulated industries.
• Minimum 5 years of experience identifying technology risks and defining cybersecurity control requirements.
• Minimum 5 years of experience conducting cybersecurity risk assessments and control assessments.
• Minimum 5 years of experience across cybersecurity domains including IAM, Vulnerability Management, Cloud Security, Architecture, Network Security, Metrics, and Compliance.
• Minimum 5 years with cybersecurity control frameworks such as NIST, ISO 27001.
• Minimum 3 years of experience assessing cybersecurity risks associated with AI/ML and emerging tech.
• Minimum 3 years evaluating AI/ML architectures and risk vectors.
• Minimum 3 years of third-party or vendor cybersecurity risk assessments and due diligence.
• Minimum 3 years supporting BISO, Cyber Risk, Technology Risk, Information Security Governance, or Enterprise Risk Management functions.
• Minimum 3 years managing technology evaluation requests and cybersecurity governance workflows.
• Strong understanding of cybersecurity risk identification, control assessment, and risk reporting.
• Strong communication and stakeholder management skills across technical and non-technical audiences.
• Experience facilitating working sessions with Cyber SMEs, technology teams, business stakeholders, and senior leadership.
• Minimum 5 years of independent work with multiple priorities and timelines.

Responsibilities

• Conduct cyber risk assessments and technology reviews for regulated financial services initiatives.
• Perform toll gate reviews for cyber-related technology intake requests.
• Partner with technology teams and stakeholders to evaluate technology solutions and identify gaps.
• Support AI Center of Excellence by performing cybersecurity risk evaluations of AI/ML solutions.
• Collaborate to ensure AI initiatives align with cybersecurity standards and governance.
• Represent BISO in AI CoE processes, backlogs, and reporting.
• Evaluate cybersecurity risks across IAM, Vulnerability Management, Cloud, Architecture, Network, Metrics, and Compliance.
• Assess controls against NIST/ISO 27001 or equivalent frameworks.
• Evaluate third-party and vendor cybersecurity risks and manage requirements.
• Review AI/ML architectures, data flows, and risk vectors to support governance decisions.
• Develop and maintain reporting capabilities, dashboards, and management reporting for cyber risk and BISO activities.
• Facilitate sessions and communicate complex concepts to stakeholders.
• Build trusted relationships with Cyber SMEs, technology partners, and business leaders.

Skills

Cybersecurity risk management

Regulated industry experience

Stakeholder communication

Risk assessment

AI/ML risk knowledge

Third-party risk management

BISO support experience

Independent work

Project management

Risk reporting

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, Risk Management

Job description

Basic Qualifications

• Minimum 7 years of hands-on experience in Cybersecurity Risk Management, Technology Risk, Information Security, or Cybersecurity Governance.
• Minimum 7 years of experience working within the Financial Services, Banking, Insurance, Brokerage, or other highly regulated industry.
• Minimum 5 years of experience identifying technology risks, defining cybersecurity control requirements, identifying control gaps, and proposing risk mitigation strategies.
• Minimum 5 years of experience conducting cybersecurity risk assessments, technology reviews, and control assessments.
• Minimum 5 years of experience across cybersecurity domains including IAM, Vulnerability Management, Cloud Security, Cybersecurity Architecture, Network Security, Metrics, and Compliance.
• Minimum 5 years of experience with cybersecurity control frameworks such as NIST, ISO 27001, or equivalent industry frameworks.
• Minimum 3 years of experience assessing cybersecurity risks associated with AI, Machine Learning, Generative AI, or other emerging technologies.
• Minimum 3 years of experience evaluating AI and Machine Learning architectures, associated cybersecurity risk vectors, data protection risks, and evaluation methodologies.
• Minimum 3 years of experience with third-party or vendor cybersecurity risk assessments and due diligence.
• Minimum 3 years of experience supporting BISO, Cyber Risk, Technology Risk, Information Security Governance, or Enterprise Risk Management functions.
• Minimum 3 years of experience managing technology evaluation requests, cyber risk intake processes, BISO intake requests, or similar cybersecurity governance workflows.
• Strong understanding of cybersecurity risk identification, control assessment, risk remediation, risk acceptance, issue management, and risk reporting.
• Strong communication and stakeholder management skills with the ability to communicate complex cybersecurity and technology risk concepts to both technical and non-technical audiences.
• Strong experience facilitating working sessions and collaborating with Cyber SMEs, technology teams, business stakeholders, and senior leadership.
• Minimum 5 years of experience working independently, managing multiple priorities, and delivering tasks within project timelines.

Day to Day Job Duties

• Conduct cyber risk assessments and technology reviews for new and existing technology initiatives within a regulated financial services environment.
• Perform toll gate reviews for cyber-related technology intake requests to ensure cybersecurity and risk requirements are identified, documented, and addressed before initiatives advance.
• Partner with technology teams, business stakeholders, Cyber SMEs, and cross-functional teams to evaluate technology solutions, assess control adequacy, identify gaps, and provide actionable risk guidance throughout the project lifecycle.
• Support the AI Center of Excellence (CoE) by performing cybersecurity risk evaluations of Artificial Intelligence, Machine Learning, Generative AI, and other emerging technology solutions.
• Collaborate with Cyber SMEs, business stakeholders, and technology partners to ensure AI initiatives align with established cybersecurity standards, governance frameworks, and risk management requirements.
• Represent the BISO team in supporting AI CoE processes, including conducting reviews, managing and clearing Technology Evaluation and other BISO intake request backlogs, sustaining operational processes, and building reporting capabilities.
• Evaluate cybersecurity risks across IAM, Vulnerability Management, Cloud Security, Cybersecurity Architecture, Network Security, Metrics, Compliance, and other security domains.
• Assess cybersecurity controls against established frameworks such as NIST, ISO 27001, or equivalent cybersecurity control frameworks.
• Evaluate third-party and vendor cybersecurity risks and identify appropriate security and risk management requirements.
• Review AI and Machine Learning architectures, technology solutions, data flows, and associated cybersecurity risk vectors to support risk evaluations and governance decisions.
• Develop and maintain reporting capabilities, metrics, dashboards, and management reporting for cyber risk assessments, technology evaluations, AI governance, and BISO activities.
• Facilitate working sessions and communicate complex cybersecurity and technology risk concepts clearly to technical and non-technical stakeholders.
• Build trusted relationships and collaborate effectively with Cyber SMEs, technology partners, business stakeholders, and business leaders.

Preferred Certifications

At least one of the following certifications is preferred: CISSP, CISM, CRISC, CISA

Nice to Have

• Experience working within or supporting a BISO function at a financial institution.
• Experience supporting an AI Center of Excellence (CoE) or enterprise AI governance program.
• Experience with AI governance frameworks, AI risk management, model risk management, or responsible AI practices.
• Experience with enterprise risk management programs within a regulated financial services environment.
• Experience developing cybersecurity risk dashboards, metrics, and executive reporting.
• Experience working with Agile, Scrum, or enterprise governance processes.

Degree

Bachelor's degree in computer science, Information Systems, Cybersecurity, Engineering, Risk Management, or equivalent work experience.

About NTT DATA

NTT DATA strives to hire exceptional, innovative, and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization,

We are currently seeking a professional to join our team in Halifax, Nova Scotia (CA-NS), Canada (CA).

NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize, and transform for long-term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation, and management of applications, infrastructure, and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future.

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.

NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

NTT DATA provides a reasonable range of compensation for U.S.-based positions. The starting pay range for this remote role is [$69/hr. on W2]. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate’s actual work location, relevant experience, technical skills, and other qualifications. This position is eligible for company benefits including participation in medical, dental, and vision insurance, flexible spending or health savings account, and AD&D insurance, employee assistance, participation in a 401k program, and additional voluntary or legally-required benefits