Information Security Analyst

NTT America, Inc.; Cape Town; Híbrido; ZAR 540.000 - 900.000; Jornada completa

Descripción de la vacante

NTT DATA is seeking a Security Analyst to support information security governance, risk assessment, and compliance across the Middle East & Africa region. The role emphasizes analytical rigor, clear communication, and collaboration with multiple stakeholders in a hybrid work environment.

You will work under the BISO to implement security controls, manage incidents, and maintain documentation, with ISO 27001 and related standards as key focus areas. English proficiency is required.

Formación

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• Security certification such as Security+ or equivalent.
• Cloud security certifications (CRISC, CISSP, CISM, CISA) desirable.
• Professional English proficiency (C2) required.

Responsabilidades

• Support the Office of Information Security (OIS) strategy, priorities and recurring operational activities.
• Perform security risk analyses for business opportunities, projects, services, products, and assets, identifying threats, gaps, compliance impacts, and mitigation actions.
• Support governance, risk management, and compliance activities, including implementation and maintenance of security policies, controls, regulatory requirements, and ISMS-related evidence.
• Assess supplier security by supporting new vendor approval processes and reviewing security controls of existing suppliers.
• Assist with customer security questionnaires, audits, due diligence requests, internal audit activities, evidence collection, and certification initiatives such as ISO 27001 or related standards.
• Support security risk assessment, vulnerability management, remediation coordination, and reporting with Security Operations and other relevant teams.
• Support standard incident management processes by coordinating information, documentation, and follow-up with business, IT, and security teams.
• Monitor and report security KPIs, training metrics, dashboards, risks, findings, and remediation status to improve security posture.
• Provide first-level guidance to business stakeholders on security controls, compliance obligations, mitigation plans, and corporate information security requirements.
• Maintain accurate security documentation, reports, procedures, and knowledge materials for business security, governance, compliance, audits, and operations.
• Collaborate with delivery, compliance, legal, data protection, managed security services, certification teams, and regional stakeholders as needed.
• Perform additional duties assigned by the BISO or CISO.

Conocimientos

Information security

Risk analysis

GenAI tools

Analytical mindset

Communication skills

Interpersonal skills

Team player

Independent working

Educación

Bachelor's degree in CS/IT/Cybersecurity or related field

Security certification such as Security+

Cloud security certifications (CRISC/CISSP/CISM/CISA)

Professional English proficiency (C2)

Descripción del empleo

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Office of Information Security (OIS) is responsible for implementing global security policies and standards within NTT DATA, Inc. across corporate and business areas. The OIS supports, monitors, and advises regional units, IT, delivery, and business stakeholders on information security matters across Middle East & Africa.

As a Security Analyst, you will support business security and security governance activities by helping implement and maintain strong security practices, controls, documentation, risk management, compliance, and reporting across the region.

This role requires practical information security experience, analytical rigor, attention to detail, and clear communication with technical and non-technical stakeholders. This role is required to monitor the organization's computer networks for security issues, install security software, and document any security issues or breaches found.

The Information Security Analyst is responsible for assisting in the planning, implementation, and management of information security measures to safeguard the organization's digital assets and systems and contributes to maintaining a secure and compliant environment.

Key Responsibilities

• Work under the supervision of the BISO of Middle East & Africa, supporting OIS strategy, priorities, and recurring operational activities.
• Perform security risk analysis for business opportunities, projects, services, products, and assets, identifying threats, gaps, compliance impacts, and mitigation actions.
• Support governance, risk management, and compliance activities, including implementation and maintenance of security policies, controls, regulatory requirements, and ISMS-related evidence.
• Assess supplier security by supporting new vendor approval processes and reviewing security controls of existing suppliers.
• Assist with customer security questionnaires, audits, due diligence requests, internal audit activities, evidence collection, and certification initiatives such as ISO 27001 or related standards.
• Support security risk assessment, vulnerability management, remediation coordination, and reporting with Security Operations and other relevant teams.
• Support standard incident management processes by coordinating information, documentation, and follow-up with business, IT, and security teams.
• Monitor and report security KPIs, training metrics, dashboards, risks, findings, and remediation status to improve the overall security and compliance posture.
• Provide first-level guidance to business stakeholders on security controls, compliance obligations, mitigation plans, and corporate information security requirements.
• Maintain accurate security documentation, reports, procedures, and knowledge materials for business security, governance, compliance, audits, and operational activities.
• Collaborate with delivery, compliance, legal, data protection, managed security services, certification teams, and regional stakeholders as needed.
• Perform additional duties assigned by the BISO or CISO.

Knowledge and Attributes

• Knowledge of information security standards, frameworks, and best practices such as ISO 27001, ISO 22301, ISO 42001, and related control environments. Understanding risk analysis, control assessment, compliance monitoring, regulatory frameworks, ISMS support, supplier security, audit evidence, and vulnerability management processes.
• Experience using GenAI tools in a professional environment, including responsible use for research, documentation, analysis, workflow support, or productivity improvement.
• Analytical mindset with a focus on process optimization, continuous improvement, reliable documentation, and practical remediation support.
• Strong customer orientation and ability to understand business, security, compliance, and operational needs.
• Excellent verbal and written communication skills, with the ability to explain security concepts to non-technical audiences.
• Solid interpersonal skills, collaboration mindset, professionalism, active listening, and ability to influence constructively.
• Team player who is flexible, proactive, self‑motivated, results‑oriented, and comfortable working independently in a dynamic enterprise environment.
• Quick learner with strong analytical and problem‑solving skills and the ability to manage challenging situations pragmatically.

Academic Qualifications and Certifications

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Information Security, or a related field.
• Security certification such as Security+ or equivalent recognized security certification (advantageous)
• Additional professional security certifications, including cloud security certifications, such as CRISC, CISSP, CISM, CISA, or similar. (Desirable)
• Professional English proficiency (C2) required.

Required experience

• At least 5 years of job‑related experience in information security, security governance, business security, compliance, risk management, vulnerability management, audit support, or related responsibilities.
• Knowledge of consulting, delivery, or managed services business processes.

Workplace type

Hybrid Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune

Global 100. We are committed to accelerating client success and positively impacting society through

responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with

unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and

application services. Our consulting and industry solutions help organizations and society move

confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more

than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as

established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each

year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.