Note: The job is a remote job and is open to candidates in USA. NTT DATA is a trusted global innovator of business and technology services, and they are seeking a Cyber Risk Consultant. The role involves conducting cyber risk assessments, collaborating with various teams to evaluate technology solutions, and supporting the AI Center of Excellence with cybersecurity evaluations.
Responsibilities
- Conduct cyber risk assessments and technology reviews for new and existing technology initiatives within a regulated financial services environment
- Perform toll gate reviews for cyber-related technology intake requests to ensure cybersecurity and risk requirements are identified, documented, and addressed before initiatives advance
- Partner with technology teams, business stakeholders, Cyber SMEs, and cross-functional teams to evaluate technology solutions, assess control adequacy, identify gaps, and provide actionable risk guidance throughout the project lifecycle
- Support the AI Center of Excellence (CoE) by performing cybersecurity risk evaluations of Artificial Intelligence, Machine Learning, Generative AI, and other emerging technology solutions
- Collaborate with Cyber SMEs, business stakeholders, and technology partners to ensure AI initiatives align with established cybersecurity standards, governance frameworks, and risk management requirements
- Represent the BISO team in supporting AI CoE processes, including conducting reviews, managing and clearing Technology Evaluation and other BISO intake request backlogs, sustaining operational processes, and building reporting capabilities
- Evaluate cybersecurity risks across IAM, Vulnerability Management, Cloud Security, Cybersecurity Architecture, Network Security, Metrics, Compliance, and other security domains
- Assess cybersecurity controls against established frameworks such as NIST, ISO 27001, or equivalent cybersecurity control frameworks
- Evaluate third-party and vendor cybersecurity risks and identify appropriate security and risk management requirements
- Review AI and Machine Learning architectures, technology solutions, data flows, and associated cybersecurity risk vectors to support risk evaluations and governance decisions
- Develop and maintain reporting capabilities, metrics, dashboards, and management reporting for cyber risk assessments, technology evaluations, AI governance, and BISO activities
- Facilitate working sessions and communicate complex cybersecurity and technology risk concepts clearly to technical and non-technical stakeholders
- Build trusted relationships and collaborate effectively with Cyber SMEs, technology partners, business stakeholders, and business leaders
Skills
- Minimum 7 years of hands-on experience in Cybersecurity Risk Management, Technology Risk, Information Security, or Cybersecurity Governance
- Minimum 7 years of experience working within the Financial Services, Banking, Insurance, Brokerage, or other highly regulated industry
- Minimum 5 years of experience identifying technology risks, defining cybersecurity control requirements, identifying control gaps, and proposing risk mitigation strategies
- Minimum 5 years of experience conducting cybersecurity risk assessments, technology reviews, and control assessments
- Minimum 5 years of experience across cybersecurity domains including IAM, Vulnerability Management, Cloud Security, Cybersecurity Architecture, Network Security, Metrics, and Compliance
- Minimum 5 years of experience with cybersecurity control frameworks such as NIST, ISO 27001, or equivalent industry frameworks
- Minimum 3 years of experience assessing cybersecurity risks associated with AI, Machine Learning, Generative AI, or other emerging technologies
- Minimum 3 years of experience evaluating AI and Machine Learning architectures, associated cybersecurity risk vectors, data protection risks, and evaluation methodologies
- Minimum 3 years of experience with third-party or vendor cybersecurity risk assessments and due diligence
- Minimum 3 years of experience supporting BISO, Cyber Risk, Technology Risk, Information Security Governance, or Enterprise Risk Management functions
- Minimum 3 years of experience managing technology evaluation requests, cyber risk intake processes, BISO intake requests, or similar cybersecurity governance workflows
- Strong understanding of cybersecurity risk identification, control assessment, risk remediation, risk acceptance, issue management, and risk reporting
- Strong communication and stakeholder management skills with the ability to communicate complex cybersecurity and technology risk concepts to both technical and non-technical audiences
- Strong experience facilitating working sessions and collaborating with Cyber SMEs, technology teams, business stakeholders, and senior leadership
- Minimum 5 years of experience working independently, managing multiple priorities, and delivering tasks within project timelines
- Bachelor's degree in computer science, Information Systems, Cybersecurity, Engineering, Risk Management, or equivalent work experience
- At least one of the following certifications is preferred: CISSP, CISM, CRISC, CISA
- Experience working within or supporting a BISO function at a financial institution
- Experience supporting an AI Center of Excellence (CoE) or enterprise AI governance program
- Experience with AI governance frameworks, AI risk management, model risk management, or responsible AI practices
- Experience with enterprise risk management programs within a regulated financial services environment
- Experience developing cybersecurity risk dashboards, metrics, and executive reporting
- Experience working with Agile, Scrum, or enterprise governance processes
Benefits
- Participation in medical, dental, and vision insurance
- Flexible spending or health savings account
- AD&D insurance
- Employee assistance
- Participation in a 401k program
- Additional voluntary or legally-required benefits
Company Overview