Regional InfoSec Analyst — Governance & Compliance

NTT America, Inc.; Cape Town; Hybride; ZAR 540 000 - 900 000; Plein temps

Résumé du poste

NTT DATA is seeking a Security Analyst to support information security governance, risk assessment, and compliance across the Middle East & Africa region. The role emphasizes analytical rigor, clear communication, and collaboration with multiple stakeholders in a hybrid work environment.

You will work under the BISO to implement security controls, manage incidents, and maintain documentation, with ISO 27001 and related standards as key focus areas. English proficiency is required.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• Security certification such as Security+ or equivalent.
• Cloud security certifications (CRISC, CISSP, CISM, CISA) desirable.
• Professional English proficiency (C2) required.

Responsabilités

• Support the Office of Information Security (OIS) strategy, priorities and recurring operational activities.
• Perform security risk analyses for business opportunities, projects, services, products, and assets, identifying threats, gaps, compliance impacts, and mitigation actions.
• Support governance, risk management, and compliance activities, including implementation and maintenance of security policies, controls, regulatory requirements, and ISMS-related evidence.
• Assess supplier security by supporting new vendor approval processes and reviewing security controls of existing suppliers.
• Assist with customer security questionnaires, audits, due diligence requests, internal audit activities, evidence collection, and certification initiatives such as ISO 27001 or related standards.
• Support security risk assessment, vulnerability management, remediation coordination, and reporting with Security Operations and other relevant teams.
• Support standard incident management processes by coordinating information, documentation, and follow-up with business, IT, and security teams.
• Monitor and report security KPIs, training metrics, dashboards, risks, findings, and remediation status to improve security posture.
• Provide first-level guidance to business stakeholders on security controls, compliance obligations, mitigation plans, and corporate information security requirements.
• Maintain accurate security documentation, reports, procedures, and knowledge materials for business security, governance, compliance, audits, and operations.
• Collaborate with delivery, compliance, legal, data protection, managed security services, certification teams, and regional stakeholders as needed.
• Perform additional duties assigned by the BISO or CISO.

Connaissances

Information security

Risk analysis

GenAI tools

Analytical mindset

Communication skills

Interpersonal skills

Team player

Independent working

Formation

Bachelor's degree in CS/IT/Cybersecurity or related field

Security certification such as Security+

Cloud security certifications (CRISC/CISSP/CISM/CISA)

Professional English proficiency (C2)

Description du poste

NTT DATA is seeking a Security Analyst to support information security governance, risk assessment, and compliance across the Middle East & Africa region. The role emphasizes analytical rigor, clear communication, and collaboration with multiple stakeholders in a hybrid work environment.

You will work under the BISO to implement security controls, manage incidents, and maintain documentation, with ISO 27001 and related standards as key focus areas. English proficiency is required.