Security Analysis Senior Specialist

NTT DATA

5–10 yrs Hyderabad Full Time Remote
NTT DATA logo
Posted : today
Actively hiring

Job description

Join NTT DATA, a global leader in business and technology services, as a Security Analysis Senior Specialist. We are seeking an innovative and passionate individual to contribute to our inclusive and forward-thinking organization. This role focuses on establishing and maintaining robust Governance, Risk, Compliance (GRC), Privacy, and Internal Control programs.

You will play a crucial part in supporting enterprise risk management, ensuring regulatory compliance (including SOX), and upholding privacy standards (GDPR, CCPA/CPRA). The position involves close collaboration with various business units, IT, Legal, Privacy, Internal Audit, External Auditors, and executive leadership to translate regulatory obligations into effective controls and processes, thereby mitigating organizational risk.

Responsibilities

Key responsibilities include facilitating comprehensive risk assessments (enterprise, business, IT, cybersecurity, operational), developing risk registers, and implementing mitigation strategies. You will also drive SOX compliance programs, conduct privacy impact assessments, and maintain records of processing activities. The role involves developing and maintaining enterprise control frameworks, assessing control effectiveness, and supporting various internal and external audits. Additionally, you will manage policies and procedures, conduct third-party risk assessments, and prepare executive dashboards and compliance reports.

Qualifications

A Bachelor's degree in Information Security, Information Technology, Business Administration, Risk Management, Accounting, Law, or a related field is required. We are looking for candidates with 5–10 years of experience in GRC, Internal Controls, Privacy, Risk Management, Audit, or Regulatory Compliance, preferably within multinational organizations facing diverse regulatory landscapes. Essential skills include expertise in Enterprise Risk Management, SOX, GDPR, CCPA/CPRA, and various audit and control frameworks such as ISO/IEC 27001 and NIST CSF.

Essential Skills

Enterprise Risk Management (ERM)Governance FrameworksRisk AssessmentsControl Framework DesignControl TestingCompliance MonitoringPolicy ManagementRisk RegistersIssue and Remediation ManagementSarbanes-Oxley (SOX)IT General Controls (ITGC)Business Process ControlsInternal Control over Financial Reporting (ICFR)Regulatory Gap AssessmentsCompliance AssessmentsGDPRCCPA/CPRAData Protection Impact Assessments (DPIA)Privacy Impact Assessments (PIA)Records of Processing Activities (RoPA)Data Subject Rights (DSR)Cross-border Data Transfer RequirementsData Retention and Privacy GovernanceInternal AuditsExternal AuditsAudit Evidence CollectionAudit ReadinessRemediation TrackingControl WalkthroughsISO/IEC 27001ISO/IEC 27701NIST Cybersecurity Framework (CSF)SOC 1SOC 2

Good to Have

PCI DSSCertified Information Systems Auditor (CISA)Certified Information Systems Security Professional (CISSP)Certified in Risk and Information Systems Control (CRISC)Certified Internal Auditor (CIA)Certified Information Privacy Professional (CIPP/ECIPP/US)Certified Information Privacy Manager (CIPM)ISO/IEC 27001 Lead AuditorISO/IEC 27001 Lead ImplementerISO/IEC 27701 Lead Implementer

Highlights

  • Actively hiring

More Details

RoleSecurity Analysis Senior Specialist
DepartmentGovernance, Risk, Compliance, Privacy, Information Security
Employment TypeFull Time, Remote

About the Company

NTT DATA logo

NTT DATA

IT Consulting

Security Analysis Senior Specialist at NTT DATA | SkillMX | SkillMX