Security Apps Lead📣 Job Ad

About the Security Apps Lead Role

NTT DATA Inc. is seeking a Security Apps Lead to join their team in Riyadh, Saudi Arabia. This is a full-time, developing management position focused on the operational management of organizational information security programs. The role is integral to implementing the company's security and governance strategy, frameworks, policies, and practices to ensure risk-free and scalable business operations.

Role Overview and Responsibilities

The Security Apps Lead will be responsible for the operational management and implementation of an organization-wide information security strategy aligned with business objectives. This involves maintaining and implementing information security policies, procedures, standards, and guidelines in compliance with industry best practices and regulatory requirements. The role requires collaboration with cross-functional teams, management, and stakeholders to foster a robust and proactive information security posture and an innovative team culture focused on operational excellence.

• Coordinate the identification, assessment, and management of information security risks across data, systems, networks, and third-party relationships.
• Promote security awareness among employees through training, education, and communication.
• Coordinate the execution of incident response plans to effectively address and mitigate security incidents.
• Ensure company compliance with relevant security regulations, laws, and industry standards.
• Assist with the assessment and selection of appropriate security technologies and solutions.
• Implement security monitoring tools and systems, providing regular reports to senior leadership.
• Stay informed about emerging security threats and industry trends.
• Communicate security incidents, responses, and mitigation efforts to relevant stakeholders.
• Coordinate and manage internal and external security audits and assessments.
• Provide guidance and management to the information security team.

Required Qualifications and Experience

Candidates should possess a Bachelor's degree or equivalent in business administration or a technology-related field. Related Cybersecurity, risk management, and data privacy certifications such as CompTIA Security+, CISSP, CISM, CISA, and/or CEH are preferred.

The role requires 5-10 years of experience, including:

• Solid experience in a combination of risk management, information security, and IT roles within a global organization.
• Solid experience with contract and vendor negotiations and management.
• Solid experience in Agile (scaled) software development or other best-in-class development practices.
• Solid experience with Cloud computing / Elastic computing across virtualized environments.
• Solid experience in risk management, compliance, and regulatory requirements related to information security.
• Solid experience working with national and international regulatory compliance frameworks such as NIST, ISO, SOX, EU GDPR, CCPA, and PCI DSS.
• Solid experience and working knowledge of information policy formulation, information security management, business risk management, IT risk assessment and management, IT continuity management, IT governance formulation, organizational change management, IT financial management, and IT audit.

Essential Skills and Competencies

Successful candidates will demonstrate:

• Solid knowledge of security frameworks and standards (*, ISO 27001, NIST, CIS).
• Solid understanding of security technologies, tools, and best practices.
• Excellent communication and presentation skills, with the ability to convey complex security concepts to non-technical stakeholders.
• Developing team management skills to lead and motivate a diverse security team.
• Good problem-solving abilities with a focus on delivering results.
• Good business acumen and the ability to align security activities with overall security strategic objectives.

Work Location and Type

This is a full-time position located in Riyadh, Riyadh, Saudi Arabia.