AI Security & Privacy Analyst

Overview

The AI Security & Privacy Analyst owns the security and privacy architecture for AI/ML-enabled products and enterprise AI platforms, embedding secure-by-design and privacy-by-design controls across the AI lifecycle.

What you'll do

• Provide technical consulting services in multi-platform IT environments and perform analytical assignments as required by project management, particularly in complex areas of difficulty or critical need.
• Identify and investigate opportunities to use emerging technologies to provide cost effective and flexible solutions, maintaining current knowledge of the organisation's business plans, existing infrastructure and emerging technologies.
• Identify areas for improvement by reviewing new and existing information technology projects for compliance to IT architecture.
• Work with users and other architects to define the requirements of an application and specify an optimum design for subsequent development.
• Provide subject matter expertise on security initiatives across the company.
• Liaise with and provide SME advice on information security matters such as BAU security activities, emerging security risks and relevant security controls, across BU functions and with senior management, department heads and managers.
• Work with senior leaders/managers to champion the priority of security initiatives.
• Deliver a centre of excellence for information security, offering internal consultancy, advice and pragmatic assistance on information security risk and control matters throughout the organisation.
• Guide the development of a layered defence strategy to protect our assets.
• Oversee the design and build of an advanced security operations function.
• Function as an internal consulting resource on information security issues and incidents.
• Provide security architecture and risk guidance for projects and products, including the evaluation and recommendation of technical controls and solutions.
• Mitigate enterprise vulnerabilities and reduce attack surface vectors identified through security reviews and controls implementation.
• Execute risk assessments, security architecture design reviews, and project security reviews, ensuring key applications and products are assessed for risk.
• Help ensure compliance with applicable data security laws, regulations, and customer requirements.
• Document and map the architecture of current security infrastructure.
• Lead and guide information security risk assessments and controls selection activities.
• Lead and/or commission information security controls for both the build and run functions.
• Oversee the design and operations of related security controls and improvement activities to ensure compliance with internal security policies and applicable laws and regulations.

What you'll need

• Technical capability in one or more areas of information security controls.
• Understanding of information technology and information security in one or more technical domains.
• Demonstration of NTT Limited's core values of proactivity, teamwork, professional excellence, partnership, personal commitment and multi-cultural strength.
• Working knowledge of infrastructure design, including network, storage and compute layers, with deeper knowledge in at least one area.
• Interpersonal skills and the ability to develop strong customer (internal / external) relationships.
• Industry and market awareness.
• Ability to negotiate and influence.
• Ability to communicate to all audience levels (executive to technical).
• Comfortable presenting and communicating solutions at a business and technical level.
• Strong professional documentation skills.
• A team player willing to develop and share IP.
• A strong client service orientation.
• Ability to learn new technologies and apply them in the secure design of new initiatives.
• Bachelor's degree or equivalent in Information Security or a related field, or industry relevant certifications such as CISSP, CISM, CEH, SANS/GIAC certifications or CompTIA Security+.
• Seasoned industry experience in a similar architecture role, preferably within a global IT services organisation.
• Seasoned experience in operating or configuring security controls.
• Proven experience in security compliance, as well as hands-on technical security skills.
• Solid project management experience.
• Seasoned experience working in a multi-team environment across multiple geographies and time zones.

Details

• Location: Mumbai, India.