Senior Information Security GRC Specialist

About the role

NTT DATA is seeking a seasoned Senior Information Security GRC Specialist to strengthen its security governance, risk, and compliance program. You will work closely with internal teams to assess risks, implement controls, and ensure alignment with industry standards.

Key responsibilities

• Conduct risk and vulnerability assessments to identify security gaps.
• Develop, maintain, and update security policies and procedures.
• Collaborate with stakeholders to ensure compliance with regulations and standards.
• Lead security awareness and training initiatives across the organization.
• Support incident response activities and investigations as needed.
• Monitor, measure, and report on security compliance metrics.
• Assist in the implementation of security controls and best‑practice recommendations.
• Stay current on emerging threats, trends, and regulatory changes.

Required profile

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• Relevant certifications such as CISA, CRISC, COBIT, IIA, ISO 27001 Lead Auditor/Implementer, or SOC‑TSP are preferred.
• Extensive experience (5+ years) in information security, risk assessment, compliance, or policy development.
• Strong communication and interpersonal skills for effective collaboration.
• Detail‑oriented with the ability to follow established processes.
• Proven project‑management capabilities to coordinate security initiatives.

Required skills

• Compliance
• Project management
• Risk assessment methodologies
• Policy development
• Information security frameworks and standards
• Security awareness programs
• Security controls implementation