Security Consultant
Make an impact with NTT DATAJoin a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.1.1. Role purposeThe Security Consultant leads the practice’s cyber resilience and security advisory portfolio. The role shapes and delivers security assessments, cyber recovery and minimum viable company (MVC) advisory engagements, and security architecture workstreams within broader infrastructure programs, helping regulated clients withstand, respond to, and recover from destructive cyber events.1.2. Key responsibilitiesWorks on strategic engagements that ensure the efficient and effective reaction to security breaches to mitigate immediate and potential threats.Uses mitigation, preparedness, response, and recovery approaches to minimize business disruptions and commercial consequences.Shapes and scopes security advisory opportunities, including cyber resilience assessments, minimum viable company definition, cyber recovery design, and security posture assessments.Develops proposals and statements of work with clearly defined methodology stages, deliverables, stakeholder models, and acceptance criteria.Leads security and resilience assessments using recognized frameworks (NIST CSF, CIS Controls, ISO/IEC 27001) and regulatory baselines (BNM RMiT, MAS TRM, NACSA/NCII requirements, PDPA).Conducts regular threat and vulnerability assessments and determines deviations from acceptable configurations or policies.Participates in the assessment of the level of risk and supports the development of appropriate mitigation countermeasures in operational and non-operational situations.Defines minimum viable company scope for clients by identifying critical business services, mapping supporting applications and infrastructure, and establishing recovery priorities and dependencies.Designs cyber recovery architectures, including isolated recovery environments, cleanroom recovery, immutable vaulting, and recovery validation processes.Leads data protection and resilience assessments (ransomware recovery readiness) and supports the design and build of disaster recovery sites and cyber resilience third sites.Develops business impact analyses (BIA), business continuity plans (BCP), disaster recovery plans (DRP), and cyber incident recovery plans (CIRP/CRP).Develops incident response and recovery playbooks and designs and facilitates tabletop exercises with client executive and technical teams.Participates in the implementation of policies, processes, and guidelines to ensure the standardization of security management throughout client organizations.Advises on security architecture within infrastructure programs, including network segmentation and micro segmentation, identity and privileged access management, endpoint and workload protection, and s...