Correct. You also need a resistor between the Arduino's GPIO and the transistor's base (current limiter).