Information Security Analyst

nttlimited; Johannesburg; Presencial; ZAR 420.000 - 640.000; Jornada completa

Descripción de la vacante

NTT DATA is seeking a proactive Information Security Analyst to support the Office of Information Security across the Middle East & Africa region. You will help implement security controls, risk management, and compliance, while documenting and reporting security incidents and trends.

The role requires collaboration with cross-functional teams, strong communication, and the ability to translate security concepts for non-technical stakeholders in a dynamic enterprise environment.

Formación

• Knowledge of information security standards and frameworks.
• Experience supporting governance, risk management, and compliance.
• Experience with ISO 27001 or related standards.
• Experience documenting security issues and remediation actions.
• Experience using GenAI tools for research and documentation.

Responsabilidades

• Support OIS strategy, priorities, and operational activities under BISO.
• Perform security risk analysis for projects, services, products, and assets.
• Assist with supplier security reviews and vendor approval processes.
• Support security incident management and KPI reporting.
• Collaborate with compliance, legal, data protection and regional teams.
• Maintain security documentation and audit evidence.

Conocimientos

Information security knowledge

GenAI tools experience

Analytical mindset

Communication skills

Team collaboration

Problem solving

Educación

Bachelor's degree in Computer Science/IT/Cybersecurity

Herramientas

Security governance tools

Descripción del empleo

Make an impact with NTT DATA Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion - it's a place where you can grow, belong and thrive.

Your day at NTT DATA

The Office of Information Security (OIS) is responsible for implementing global security policies and standards within NTT DATA, Inc. across corporate and business areas. The OIS supports, monitors, and advises regional units, IT, delivery, and business stakeholders on information security matters across Middle East & Africa.

As a Security Analyst, you will support business security and security governance activities by helping implement and maintain strong security practices, controls, documentation, risk management, compliance, and reporting across the region.

This role requires practical information security experience, analytical rigor, attention to detail, and clear communication with technical and non-technical stakeholders. This role is required to monitor the organization's computer networks for security issues, install security software, and document any security issues or breaches found.

The Information Security Analyst is responsible for assisting in the planning, implementation, and management of information security measures to safeguard the organization's digital assets and systems and contributes to maintaining a secure and compliant environment.

Key Responsibilities

• Work under the supervision of the BISO of Middle East & Africa, supporting OIS strategy, priorities, and recurring operational activities.
• Perform security risk analysis for business opportunities, projects, services, products, and assets, identifying threats, gaps, compliance impacts, and mitigation actions.
• Support governance, risk management, and compliance activities, including implementation and maintenance of security policies, controls, regulatory requirements, and ISMS-related evidence.
• Assess supplier security by supporting new vendor approval processes and reviewing security controls of existing suppliers.
• Assist with customer security questionnaires, audits, due diligence requests, internal audit activities, evidence collection, and certification initiatives such as ISO 27001 or related standards.
• Support security risk assessment, vulnerability management, remediation coordination, and reporting with Security Operations and other relevant teams.
• Support standard incident management processes by coordinating information, documentation, and follow-up with business, IT, and security teams.
• Monitor and report security KPIs, training metrics, dashboards, risks, findings, and remediation status to improve the overall security and compliance posture.
• Provide first-level guidance to business stakeholders on security controls, compliance obligations, mitigation plans, and corporate information security requirements.
• Maintain accurate security documentation, reports, procedures, and knowledge materials for business security, governance, compliance audits, and operational activities.
• Collaborate with delivery, compliance, legal, data protection, managed security services, certification teams, and regional stakeholders as needed.
• Perform additional duties assigned by the BISO or CISO.

Knowledge and Attributes

Knowledge of information security standards, frameworks, and best practices such as ISO 27001, ISO 22301, ISO 42001, and related control environments. Understanding risk analysis, control assessment, compliance monitoring, regulatory frameworks, ISMS support, supplier security, audit evidence, and vulnerability management processes.

Experience using GenAI tools in a professional environment, including responsible use for research, documentation, analysis, workflow support, or productivity improvement.

Analytical mindset with a focus on process optimization, continuous improvement, reliable documentation, and practical remediation support.

Strong customer orientation and ability to understand business, security, compliance, and operational needs.

Excellent verbal and written communication skills, with the ability to explain security concepts to non-technical audiences.

Solid interpersonal skills, collaboration mindset, professionalism, active listening, and ability to influence constructively.

Team player who is flexible, proactive, self-motivated, results-oriented, and comfortable working independently in a dynamic enterprise environment.

Quick learner with strong analytical and problem-solving skills and the ability to manage challenging situations pragmatically.

Academic Qualifications and Certifications

Bachelor's degree in computer science, Information Technology, Cybersecurity, Information Security, or a related field. Security certification such as Security+ or equivalent recognized security certification (advantageous) Additional professional security certifications, in