Information Security Manager

Salary: $116,000 - 226,000 per year Requirements:

• We need 8+ years of experience in information security, cybersecurity, risk management, security operations, or a related discipline.
• We need 5+ years leading or overseeing vulnerability management, threat management, security governance, or risk remediation programs.
• We need experience supporting enterprise-scale environments and customer-facing security engagements.
• We need experience coordinating remediation activities across multiple technical teams and business stakeholders.
• We need strong knowledge of vulnerability management methods, frameworks, and industry best practices.
• We need hands-on experience with vulnerability assessment and scanning tools such as Tenable/Nessus, Qualys, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management.
• We need a solid understanding of security controls across infrastructure, networks, cloud platforms, endpoints, identity and access management, and applications.
• We need knowledge of security frameworks and regulatory standards such as NIST, CIS Controls, ISO 27001, PCI-DSS, and SOX.
• We value experience supporting managed security services or large enterprise outsourcing engagements.
• We value direct experience working with CISOs and senior executive stakeholders.
• We value cloud security experience with Azure, AWS, and Google Cloud.
• We value familiarity with threat intelligence, attack surface management, and security architecture principles.
• We value exposure to ServiceNow, Archer, Jira, or similar governance and remediation tracking tools.
• We value experience developing vulnerability management metrics, KPIs, and executive dashboards.
• We value audit and compliance support experience in highly regulated environments.
• We value knowledge of security automation and orchestration practices.
• We need strong strategic thinking with a proactive risk management mindset.
• We need the ability to build trusted customer relationships and influence decisions.
• We need strong facilitation and cross-functional collaboration skills.
• We need a continuous improvement mindset focused on measurable security outcomes.
• We need strong analytical and risk assessment capabilities.
• We need excellent verbal, written, and executive presentation skills.
• We need the ability to influence stakeholders and drive remediation without direct authority.
• We need strong customer relationship management and consulting skills.
• We need the ability to manage competing priorities in a fast-paced environment.
• We need a bachelors degree in information security, cybersecurity, computer science, information technology, or a related field, or equivalent experience.
• We value professional certifications such as CISSP, CISM, CRISC, GIAC, Security+, or CEH.

• We serve as the primary information security advisor and trusted partner for assigned customer accounts.
• We oversee and coordinate information security services delivered to the customer so they align with business goals, policies, contractual commitments, and compliance obligations.
• We work closely with customer leadership, technical teams, and service delivery teams to identify risks, recommend mitigation actions, and strengthen the security posture.
• We lead the threat and vulnerability management program, including identification, risk-based prioritization, remediation governance, reporting, and coordination across internal and third-party stakeholders.
• We ensure security services are delivered in line with the contract and applicable standards and regulations such as PCI and SOX.
• We collaborate with clients to define and implement security policies, strategies, procedures, and configurations that protect confidentiality, integrity, and availability.
• We contribute to strategic design discussions that translate security and business needs into processes and systems.
• We evaluate emerging security products and technologies and advise customer leadership on their impact.
• We identify and recommend security improvements that support the customers business objectives.
• We manage remediation efforts arising from incidents, penetration tests, vulnerability scans, audits, and critical practice assessments.
• We identify security weaknesses and capability gaps, then work with the customer to raise operations to the required standard.
• We represent IT security in delivery and operational meetings and lead security review sessions with key stakeholders.
• We review service management reports to confirm tickets are acknowledged, progressed, and closed within SLA expectations.
• We direct ticket remediation and verify completion.
• We run an ongoing security awareness program for NTT DATA personnel supporting the customer.
• We maintain open, trusted communication with the account team and customer to surface issues, challenges, and risks early.
• We maintain a forward-looking security strategy and roadmap aligned to the customers services and portfolio.
• We assess vulnerabilities and threats identified through infrastructure scans and coordinate remediation plans with internal teams and third parties.
• We maintain the documentation that defines the threat and vulnerability management program, policies, and procedures.

• AI
• AWS
• Azure
• Cloud
• Support
• JIRA
• Security
• ServiceNow
• Network

More:

We are NTT DATA, a $30 billion business and technology services leader serving 75% of the Fortune Global 100. We are a global provider of AI and digital infrastructure services with capabilities in enterprise-scale AI, cloud, security, connectivity, data centers, and application services. Our consulting and industry solutions help organizations move confidently into the digital future, and we operate in more than 50 countries with access to innovation centers and partner ecosystems. This is a remote U.S. role based out of our Irving, Texas team, with compensation starting at $116,000 to $226,000 depending on experience, skills, and work location, and it may also be eligible for incentive pay. We hire locally whenever possible and may require in-office attendance for meetings or events based on business needs. We are committed to an inclusive, adaptable, and forward-thinking workplace, and we are an equal opportunity employer.

last updated 33 week of 2026