Information Security Analyst

NTT America, Inc.; Johannesburg; Hybride; ZAR 600 000 - 900 000; Plein temps

Résumé du poste

NTT DATA is seeking an Information Security Analyst to support the Office of Information Security across the Middle East & Africa. The role focuses on security governance, risk management, compliance, and reporting, with emphasis on documentation and practical remediation.

The candidate will work with business stakeholders and regional teams in a hybrid setup. You will analyse security risks, assist with policy and evidence collection, and contribute to ISO 27001 and related standard

Qualifications

• Knowledge of information security standards, frameworks and best practices (ISO 27001, 22301, 42001).
• Experience supporting governance, risk management, and compliance activities.
• Experience with supplier security, audits, and ISMS evidence collection.
• Strong communication to explain security concepts to non-technical audiences.

Responsabilités

• Support OIS strategy and recurring activities under BISO supervision.
• Perform security risk analysis for projects, services, and assets.
• Assist with policy implementation, regulatory requirements and evidence collection.
• Support supplier security reviews and vendor onboarding processes.
• Assist with customer security questionnaires, audits and certifications (ISO 27001, etc.).
• Support incident management processes and security KPI reporting.
• Provide guidance on security controls and compliance obligations.
• Maintain security documentation, reports and knowledge materials.
• Collaborate with legal, data protection, delivery, and regional stakeholders.

Connaissances

InfoSec knowledge

ISO 27001

Risk management

ISMS

GenAI tools usage

Strong communication

Analytical thinking

Formation

Bachelor’s degree in CS/IT/Cybersecurity

Security+ certification

Cloud security certifications (CRISC/CISSP/CISM/CISA)

English proficiency (C2)

Description du poste

Make an impact with NTT DATA

Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.

Your day at NTT DATA

The Office of Information Security (OIS) is responsible for implementing global security policies and standards within NTT DATA, Inc. across corporate and business areas. The OIS supports, monitors, and advises regional units, IT, delivery, and business stakeholders on information security matters across Middle East & Africa.

As a Security Analyst, you will support business security and security governance activities by helping implement and maintain strong security practices, controls, documentation, risk management, compliance, and reporting across the region.

This role requires practical information security experience, analytical rigor, attention to detail, and clear communication with technical and non-technical stakeholders. This role is required to monitor the organization's computer networks for security issues, install security software, and document any security issues or breaches found.

The Information Security Analyst is responsible for assisting in the planning, implementation, and management of information security measures to safeguard the organization's digital assets and systems and contributes to maintaining a secure and compliant environment.

Key Responsibilities:

• Work under the supervision of the BISO of Middle East & Africa, supporting OIS strategy, priorities, and recurring operational activities.
• Perform security risk analysis for business opportunities, projects, services, products, and assets, identifying threats, gaps, compliance impacts, and mitigation actions.
• Support governance, risk management, and compliance activities, including implementation and maintenance of security policies, controls, regulatory requirements, and ISMS-related evidence.
• Assess supplier security by supporting new vendor approval processes and reviewing security controls of existing suppliers.
• Assist with customer security questionnaires, audits, due diligence requests, internal audit activities, evidence collection, and certification initiatives such as ISO 27001 or related standards.
• Support security risk assessment, vulnerability management, remediation coordination, and reporting with Security Operations and other relevant teams.
• Support standard incident management processes by coordinating information, documentation, and follow-up with business, IT, and security teams.
• Monitor and report security KPIs, training metrics, dashboards, risks, findings, and remediation status to improve the overall security and compliance posture.
• Provide first-level guidance to business stakeholders on security controls, compliance obligations, mitigation plans, and corporate information security requirements.
• Maintain accurate security documentation, reports, procedures, and knowledge materials for business security, governance, compliance, audits, and operational activities.
• Collaborate with delivery, compliance, legal, data protection, managed security services, certification teams, and regional stakeholders as needed.
• Perform additional duties assigned by the BISO or CISO.

Knowledge and Attributes:

• Knowledge of information security standards, frameworks, and best practices such as ISO 27001, ISO 22301, ISO 42001, and related control environments. Understanding risk analysis, control assessment, compliance monitoring, regulatory frameworks, ISMS support, supplier security, audit evidence, and vulnerability management processes.
• Experience using GenAI tools in a professional environment, including responsible use for research, documentation, analysis, workflow support, or productivity improvement.
• Analytical mindset with a focus on process optimization, continuous improvement, reliable documentation, and practical remediation support.
• Strong customer orientation and ability to understand business, security, compliance, and operational needs.
• Excellent verbal and written communication skills, with the ability to explain security concepts to non-technical audiences.
• Solid interpersonal skills, collaboration mindset, professionalism, active listening, and ability to influence constructively.
• Team player who is flexible, proactive, self-motivated, results-oriented, and comfortable working independently in a dynamic enterprise environment.
• Quick learner with strong analytical and problem-solving skills and the ability to manage challenging situations pragmatically.

Academic Qualifications and Certifications:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, Information Security, or a related field.
• Security certification such as Security+ or equivalent recognized security certification (advantageous)
• Additional professional security certifications, including cloud security certifications, such as CRISC, CISSP, CISM, CISA, or similar. (Desirable)
• Professional English proficiency (C2) required.

Required experience:

• At least 5 years of job-related experience in information security, security governance, business security, compliance, risk management, vulnerability management, audit support, or related responsibilities.
• Knowledge of consulting, delivery, or managed services business processes.

Workplace type :

Hybrid Working

About NTT DATA

NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune

Global 100. We are committed to accelerating client success and positively impacting society through

responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with

unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and

application services. Our consulting and industry solutions help organizations and society move

confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more

than 70 countries. We also offer clients access to a robust ecosystem of innovation centers as well as

established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each

year in R&D.

Equal Opportunity Employer

NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us.