Information Security Manager - REMOTE U.S.

The NTT DATA Services Information Security Manager (ISM) oversees and coordinates the information security services that NTT DATA provides to the customer.This is an individual contributor role in which the ISM acts as a trusted information security partner with the customer and works collaboratively to understand, anticipate and recommend risk mitigation while promoting the overall information security protection for the customer's information assets.

You will partner with the client to align information security with the customer's business strategy, security policies and regulatory and compliance requirements resulting in increased protection and reduced risk. **This is a U.S. virtual/REMOTE role (CST or EST time zone preferred) which will require up to 25% domestic U.S. travel (primarily to Boston).

Responsibilities: - Ensure the delivery of information security services to the customer is in compliance with the contract and any applicable standards and regulatory requirements - Collaborate with the client in the definition and implementation of information security policies, strategies, procedures and configurations in order to ensure confidentiality, integrity and availability of client's environment and data - Participate with the customer in the strategic design process to translate security and business requirements into technologies, processes and systems - Evaluate new / emerging security products and technologies and make recommendations to customer leadership in regards to the security impact and value to the organization - Participate in internal and external audits for the customer (e.g., PCI, SOX) and coordinate information security services activities to support the audit (i.e., defining, gathering artifacts, etc.) - Manage and drive remediation efforts related to information security; remediation may be from incidents, penetration tests, vulnerability scans, internal/external audits and Critical Practice Assessments - Identify information security weaknesses or potential gaps in the customer's current environment and work with the customer to bring information security operations up to standards - Participate and represent IT Security in Delivery/Operational meetings; conduct an information security operational review meeting with account (e.g., Customer Delivery Executive) and customer (e.g., CISO) key stakeholders with topics including overall information security status and performance - Review service management reports to ensure tickets (i.e., incidents, problems, requests, changes) related to information security, are being acknowledged, worked and Service Level Agreements are met; provide direction on ticket remediation and ensure remediation is complete - Conduct an ongoing security awareness program for NTT DATA personnel supporting the customer ensuring individuals understand and are compliant with the relevant information security obligations in support of the customer including security topics that provide guidance on customer security policies and supporting documentation and procedures - Cultivate trusted partner relationships with account and customer; keep consistent and open dialogue to uncover issues, challenges, risks - Maintain an information security strategy (forward looking roadmap), for your customer, aligning services / portfolio components to the strategy - Interact with a broad cross-section of personnel to explain and enforce security measures - Monitor the threat landscape and make timely adjustments and/or recommendations to reduce risk

Basic Requirements: - 8+ years of information security experience and/or IT risk management experience with a focus on security, performance, and reliability - Understanding of security protocols, cryptography, authentication, authorization, and security - Knowledge of multi-factor authentication, single sign-on, identity management or related technologies - Experience with network security technologies and architectures such as firewalls, IDS/IPS, DMZ architecture, Content filtering, etc. - Experience with SIEM technologies (i.e., architecture, logging, event correlation, incident response, etc.) - Experience with standards and regulations impacting information security and information security internal & external audits (i.e.

SOX, PCI, etc.)

Preferences:
- At least one of the following certifications: CISSP, CISM, SSCP, CEH, or CSSLP
- Undergraduate or graduate degree
- Security/Consulting industry experience working in a customer facing role with customer relationship management experience

#INDICS