Information Security Manager

NTT is a leading global IT solutions and services organisation that brings together people, data and things to create a better and more sustainable future.

In todays iNTTerconnected world, connections matter more now than ever. By bringing together talented people, world-class technology partners and emerging innovators, we help our clients solve some of the worlds most significant technological, business and societal challenges.

With people at the heart of our success, NTT is committed to attracting and growing the best talent and providing an environment where everyone feels they can belong and their contribution matters.

Want to be a part of our team?

The purpose of the position is to support the business, protecting Merchants, Dimension Data and NTT brands, guaranteeing compliance to regulatory and contractual obligations, taking accountability for the information security management system (ISMS) regional alignment and implementation. Ensuring that information security is effectively managed in all services and business functions within

orgnisation.

Working at NTT

Security Program Management

• Oversees and acts as a key stakeholder in managing the organisationss information security program
• Delivers a Centre of Excellence for information security, offering internal consultancy, advice and pragmatic assistance on information security risk and control matters throughout the organisation
• Promotes the advantages of managing information security risks more efficiently and effectively.
• Manages employees (direct & indirect), infrastructure, policy enforcement, emergency planning,
• security awareness, and/or other resources.

Risk Management

• Oversees, evaluates, and supports the documentation, validation, and accreditation processes necessary to ensure new and existing information technology (IT) systems meet the organisations information assurance and security requirements.
• Ensures appropriate treatment of risk, compliance, and monitoring assurance from internal and external perspectives.
• Maintains a regional risk register and reports to Risk & Compliance manager as defined.

Information Systems Security Operations

• Oversees and ensures that the appropriate operational security posture (e.g., network and system security, physical and environmental protection, personnel security, incident handling, security training and awareness) is implemented and maintained for an information system and or programs.
• Provide subject matter expert (SME) advice on information security matters such as emerging security risks and relevant security controls.
• Consults with stakeholders (group/regional Legal, Compliance & Privacy Officers, Sales & Product Management) to guide, gather and support business requirements pertaining to information security.

Vulnerability Assessment and Management

• Conducts threat and vulnerability assessments and determines deviations from acceptable configurations or policies.
• Assesses the level of risk and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations.

Enterprise Network Defence Analysis

• Uses defensive measures and information collected from a variety of sources to identify, analyse, and report events that occur or might occur within the enterprise network in order to protect information, information systems, and networks from threats.

Systems Security Analysis

• Conducts and documents the systems integration, testing, operations, maintenance, and security of an information environment.
• Coordinates risk, threat and mitigation strategies across the enterprise.

Systems Requirements Planning

• Consults with stakeholders to guide, gather, and evaluate functional and security requirements.
• Translates these requirements into guidance to stakeholders about the applicability of information systems to meet business objectives.
• Provides strategic direction for the function, ranging from planning and budgeting to the value of information security & certification

Incident Response

• Responds to security breaches to mitigate immediate and potential threats.
• Uses mitigation, preparedness, response and recovery approaches to minimise business disruptions & commercial consequences.
• Initiates problem management processes to ensure compliance to policy and ITSM processes.
• Investigates and analyses relevant response activities and evaluates the effectiveness of and improvements
• to existing practices.

Digital forensics

• Collects, processes, preserves, analyses, and presents digital-related evidence to support network vulnerability mitigation and/or civil, workplace, counterintelligence, or law enforcement (e.g., criminal, fraud) investigations.

Cyber security investigations

• Applies tactics, techniques, and procedures to a full range of tools and processes related to administrative, criminal, and counter intelligence gathering (e.g., in-depth case analyses, continuous monitoring, malware analysis, clear documentation).

Knowledge

• 3 years experience in Technology Information Security Industry
• Proven knowledge of security risks and preventative controls
• Experience working with new technologies and legacy systems
• Experienced with tools such as IDS/IPS, Hacking (Penetration testing) tools, Vulnerability Management tools, Firewalls, VPNs,
• VMware, Honeynets, etc.
• Proven experience on Windows and Unix-based vulnerabilities and exploitation techniques
• In-depth understanding of operating systems, network architectures, network protocol and system administration
• Demonstrated ability to conduct security assessments, Document findings, create reports and communicate recommendations

Skills

• Knowledge Sharing (L3)
• Networking (L3)
• Problem Solving (L4)
• Project Management (L3)
• Technical Expertise (L3)
• Oral and Written Communication (L4)

Attributes

• Impact

What will make you a good fit for the role?

Join our growing global team and accelerate your career with us. Apply today.

A Career At NTT Means

• Being part of a global pioneer where you gain exposure to our Fortune 500 clients and world-leading global technology partners and work with a network of over 40, 000 smart and diverse colleagues across 57 countries, delivering services in over 200 countries.
• Being at the forefront of cutting-edge technology backed with a 150-year heritage of using technology for good. With 40% of the worlds internet traffic running on our network and where Emoji were first invented, you can be proud of the groups many new firsts.
• Making a difference by doing meaningful work that helps to shape the future for our clients, and across industries and communities around the world.
• Being your best self in a progressive Connected Working environment that promotes flexibility, connection and wellbeing. Where diversity and different perspectives are embraced to ensure equal opportunities for all.
• Having ongoing opportunities to own and develop your career with a personal and professional development plan and access to the broadest learning offerings in the industry.