Information Security Manager

Johannesburg, Gauteng, South Africa

Job Description


NTT is a leading global IT solutions and services organisation that brings together people, data and things to create a better and more sustainable future.

In todayxe2x80x99s xe2x80x98iNTTerconnectedxe2x80x99 world, connections matter more now than ever. By bringing together talented people, world-class technology partners and emerging innovators, we help our clients solve some of the worldxe2x80x99s most significant technological, business and societal challenges.

With people at the heart of our success, NTT is committed to attracting and growing the best talent and providing an environment where everyone feels they can belong and their contribution matters.

Want to be a part of our team? Dimension Data is a proud member of the NTT Group, a global IT powerhouse headquartered in Japan. As part of NTT, we deliver a wide range of IT services and solutions to clients around the world. Although the Dimension Data brand was retired in some parts of the world in 2019, it remains well recognized in the Middle East and Africa. Join us and become part of the NTT family as we continue to provide innovative solutions that help our clients achieve their business objectives.

Working at NTT

Job Profile Summary.

Manages the development, deployment and execution of controls and defences to ensure the security and risk mitigation of company infrastructure technology, information systems and digital payment systems. Identifies cybersecurity architecture, goals, objectives and metrics, analyses business needs and priorities for protection of critical systems. Establishes and implements operational policies and appropriate standards and criteria for hardware, software, email and web firewall, access verification and encryption requirements. Monitors systems for cybersecurity vulnerabilities, threats and events, oversees incident response planning, and leads vulnerability audits and forensic investigations. Evaluates potential business impacts from security breaches and provides strategic and tactical guidance to business decision-makers. Develops and executes security systems compliance policies and procedures. Selects, develops, and evaluates personnel to ensure the efficient operation of the function.

:

Information Security Management has the responsibility to work closely with the Information Security Office (CISO) team to contribute to developing and enhancing the global Information Security Strategy and will have the responsibility and accountability for translating, directing, and implementing the global Information Security strategy across the NTT organisation.

Incumbents within this role are responsible for technical leadership within the Information Security function and liaising closely with other managers on matters of Information Security.

Information Security Management is responsible for safeguarding against current and future security risks.

This role collaborates with other NTT key stakeholders and the broader NTT Information Security community to establish the vision, tenets, and comprehensive security strategy to mitigate risks.

They will leverage their technical expertise and strong business acumen to define objectives, priorities, and establish appropriate milestones and actions to ensure the reduction of risk through the implementation of security controls and recommended mitigation strategies are delivered on, as committed to key senior management.

Responsibilities:

  • Provide line management and mentorship of a team of Security Engineers, Security Consultants, Security Architects and DevSecOps Engineers
  • Define the overall strategic security architecture vision in conjunction with the CSO xe2x80x93 TPS
  • Provide technical leadership on security initiatives.
  • Provide leadership and direction for the TPS Information Security staff embedded and distributed throughout the organisation.
  • Lead cross-functional teams in implementing Information Security
  • Liaise with and provide SME advice on Information Security matters such as BAU security activities, emerging security risks and relevant security controls, across the TPS functions (such as Research & Development, Corporate IT Management, Governance, Risk & Compliance Management, HR and Legal, Product Engineering, Product Management and Operations) in addition to senior management, department heads and managers as necessary.
  • Work with department heads and other managers to champion the priority of security initiatives.
  • Deliver a xe2x80x9cCentre of Excellencexe2x80x9d for Information Security, offering internal consultancy, advice and pragmatic assistance on Information Security risk and control matters throughout the organisation and promoting the advantages of managing Information Security risks more efficiently and effectively.
  • Provide leadership and strategic direction for the function, ranging from planning and budgeting to the value of Information Security & Certifications
  • Build a culture of security and create a compelling security vision and strategy for the company.
  • Develop a layered defence strategy to protect our assets.
  • Function as an internal consulting resource on Information Security issues and incidents
  • Provide strategic security oversight and risk guidance for projects and products, including the evaluation and recommendation of technical controls and solutions.
  • Mitigate enterprise vulnerabilities and reduce attack surface vectors identified through Security reviews and controls implementation.
  • Oversight of Threat & Risk Assessments, Security Architecture design reviews, and project security reviews, ensuring key applications and products are assessed for risk.
  • Help ensure compliance with applicable data security laws, regulations, and customer requirements.
  • Develop, manage, and execute the TPSxe2x80x99 Information Security budget in collaboration with business stakeholders.
Security Architecture function:
  • Commission Information Security risk assessments and controls selection activities
  • Commission ongoing review and analysis of internal and external security risks/vulnerabilities, and develop/implement cost effective, proactive risk mitigation programs.
Security Engineering (build) function:
  • Commission Information Security controls build processes for Security controls, client-build and new services build activities.
Security Assurance function:
  • Oversight in implementing and maintaining Application Security tools, processes, and best practices Commission Security Testing (penetration testing) for new projects, compliance and annual BAU testing.
  • Commission Vulnerability Management for new projects, compliance and ongoing BAU activities
  • Use an integrated risk management approach to create executive-level perspectives on, and status reports about, all security risks.
  • Work with other members of the TPS management team to establish appropriate priorities for security-related objectives such as resiliency, continuity, recoverability, and defensibility against risks.
  • Orchestrate and harmonise security-related business process standardisation, normalisation, documentation, and continuous improvement across services.
Knowledge Skills and Attributes:
  • Excellent communication skills xe2x80x93 both written and verbal
  • Excellent presentation skills
  • Innovative with a solid client orientation aptitude
  • Ability to train and coach teams.
  • Excellent service consulting aptitude focussing on the business, service, and sales aspects.
  • Technology specialist who provides senior mentorship, thought leadership and technical guidance to stakeholders & solution architects, specialists, developers, and business development managers.
  • Ability to use previous technical project led experience to guide successful implementation of a system solution.
  • Impeccable attention to detail with the ability to translate internal customer requirements into solutions.
  • Resourceful and confident to handle pressure in critical situations, ensuring that the client (internal and external) requirements are met.
  • Articulate and persuasive leader who can serve as an effective member of the senior management team and who is able to
  • communicate security-related concepts to a broad range of technical and non-technical staff.
  • Solid understanding of security practices in a cloud (public/private) world Highly developed technical capability across a broad range of Security products/solutions
  • Ability to map business needs to technology solutions.
  • Solid understanding of information technology and Information Security
  • Solid understanding of security risks and preventative control
  • Solid understanding of security operational processes and controls
  • Interpersonal skills with the ability to develop strong relationships.
  • Ardently attuned to security news, trends, risks, and events and be able to understand vulnerabilities and exploit code sufficiently to understand security implications and assess their impacts.
  • Ability to remain relevant in security threats, countermeasures, security tools, and network technologies.
  • Motivated with the drive to succeed.
  • A strong client service orientation
  • Ability to negotiate and influence.
  • Good project, analysis, problem-solving, and business relationship skills
Academic Qualifications and Certifications:
  • Bachelorxe2x80x99s in Computer Science or equivalent degree together with specialised training in new technologies and legacy systems
  • CISSP or equivalent certification (Highly Desirable)
  • SABSA or TOGAF certification (Highly Desirable)
#dimensiondatacareers #dimensiondatacareers #dimensiondatacareers #dimensiondatacareers

What will make you a good fit for the role?

Equal Opportunity Employer

NTT is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, color, sex, religion, national origin, disability, pregnancy, marital status, sexual orientation, gender reassignment, veteran status, or other protected category

Join our growing global team and accelerate your career with us. Apply today.

A career at NTT means:

Being part of a global pioneer xe2x80x93 where you gain exposure to our Fortune 500 clients and world-leading global technology partners and work with a network of over 40,000 smart and diverse colleagues across 57 countries, delivering services in over 200 countries.

Being at the forefront of cutting-edge technology xe2x80x93 backed with a 150-year heritage of using technology for good. With 40% of the worldxe2x80x99s internet traffic running on our network and where Emoji were first invented, you can be proud of the groupxe2x80x99s many new xe2x80x98firstsxe2x80x99.

Making a difference xe2x80x93 by doing meaningful work that helps to shape the future for our clients, and across industries and communities around the world.

Being your best self xe2x80x93 in a progressive xe2x80x98Connected Workingxe2x80x99 environment that promotes flexibility, connection and wellbeing. Where diversity and different perspectives are embraced to ensure equal opportunities for all.

Having ongoing opportunities to own and develop your career xe2x80x93 with a personal and professional development plan and access to the broadest learning offerings in the industry.

NTT Corporation

Beware of fraud agents! do not pay money to get a job

MNCJobs.co.za will not be responsible for any payment made to a third-party. All Terms of Use are applicable.


Related Jobs

Job Detail

  • Job Id
    JD1280194
  • Industry
    Not mentioned
  • Total Positions
    1
  • Job Type:
    Full Time
  • Salary:
    Not mentioned
  • Employment Status
    Permanent
  • Job Location
    Johannesburg, Gauteng, South Africa
  • Education
    Not mentioned