Private Cloud Information Security Officer (ISO)

NTT DATA•Austin, TX

3d•Hybrid

About The Position

NTT DATA Americas is seeking a Private Cloud Information Security Officer (ISO) to join their team in Austin, Texas. This senior, client-facing role will provide security leadership, governance, compliance oversight, and risk management for private cloud services supporting enterprise and public-sector customers. The Private Cloud ISO will have a dotted-line reporting relationship to the Account Senior Director and will partner closely with client security, infrastructure, cloud operations, compliance, and service delivery teams. The role is based in Austin, TX and is hybrid, requiring 2-3 days per week in the office.

Requirements

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Engineering, or a related field; equivalent experience may be considered.
10+ years of overall information technology, infrastructure, cybersecurity, cloud security, system administration, or security engineering experience.
7+ years of relevant experience as an ISO, ISSO, security manager, security analyst, cloud security lead, or security engineer supporting enterprise or regulated environments.
Ability to participate onsite in customer meetings, governance sessions, operational reviews, security workshops, and executive briefings as required.

Nice To Haves

Experience supporting private cloud, hybrid cloud, managed infrastructure, data center, virtualization, network security, identity and access management, vulnerability management, and security operations functions.
Working knowledge of security governance, risk management, compliance frameworks, audit readiness, security control assessment, continuous monitoring, incident response, and remediation tracking.
Strong written and verbal communication skills with the ability to present security posture, risks, and required actions to client stakeholders, technical teams, and executive leadership.
ITIL, process improvement, security governance, or cloud security certification experience preferred.
Excellent presentation, facilitation, negotiation, and executive communication skills.

Responsibilities

Serve as the primary security leader for private cloud services and maintain an appropriate operational security posture across assigned platforms, workloads, controls, and service processes.
Lead security governance and compliance oversight for private cloud platforms, including customer workload zones, provider service zones, virtualization layers, storage, backup, network segmentation, identity access, and management tooling.
Serve as the principal security advisor to account leadership, client security stakeholders, system owners, and operational teams on security risks, control effectiveness, compliance obligations, and remediation priorities.
Maintain a strong operational security posture for private cloud services by aligning security controls to contractual, regulatory, policy, and customer-specific security requirements.
Coordinate risk identification, assessment, treatment, tracking, and reporting across cloud infrastructure, operations, application dependencies, identity platforms, network controls, and supporting managed services.
Partner with security operations, cloud operations, network, infrastructure, data protection, and service management teams to support incident response, vulnerability remediation, configuration management, monitoring, and continuous improvement.
Support authorization, certification, audit, assessment, and evidence-gathering activities required for customer security reviews, compliance reporting, and ongoing control validation.
Develop, review, and maintain security documentation, including standard operating procedures, control narratives, risk registers, remediation plans, security metrics, customer-facing status materials, and audit evidence packages.
Provide oversight for vulnerability management, compliance scanning, audit log review, exception handling, corrective action tracking, and security findings closure.
Ensure information security requirements are incorporated throughout the private cloud service lifecycle, including transition, onboarding, operational readiness, change management, steady-state support, and service improvement.
Participate in customer meetings, governance reviews, security briefings, risk discussions, and operational reviews to clearly communicate security posture, issues, decisions needed, and remediation progress.
Collaborate with client cybersecurity teams to align monitoring, reporting, evidence, and remediation activities with the customer’s security strategy, compliance needs, and operational priorities.
Manage multiple concurrent security, compliance, remediation, and operational workstreams.
Manage programs, projects, stakeholders, and vendors.
Work effectively with clients, business partners, vendors, third-party support providers, and matrixed delivery teams.