[Hiring] Cybersecurity Professional @Hitachi

Role Description

Hitachi is seeking a skilled Cybersecurity Professional to protect our information systems and data from cyber threats. The Cybersecurity Risk Professional supports the enterprise Cybersecurity Risk Management Program by identifying, assessing, monitoring, and reporting cybersecurity risks across the organization. The role partners with business units, technology teams, control owners, and cybersecurity stakeholders to ensure risks are appropriately evaluated, documented, mitigated, and communicated in accordance with established cybersecurity governance requirements and risk appetite statements.

The Role

• Cybersecurity Risk Management
  • Conduct cybersecurity risk assessments for technology, business, and operational initiatives.
  • Analyze threats, vulnerabilities, and control effectiveness to determine residual risk.
  • Maintain and update cybersecurity risk registers.
  • Evaluate risks against approved risk appetite and risk tolerance thresholds.
  • Track risk mitigation and remediation activities through closure.
• Governance and Oversight
  • Support the operation of the Cybersecurity Risk and Control Framework (CRCF).
  • Challenge the completeness and accuracy of risk assessments and mitigation plans.
  • Monitor adherence to cybersecurity policies, standards, and control requirements.
  • Assist with exception and risk acceptance reviews.
  • Support cybersecurity governance forums and reporting activities.
• Compliance and Audit Support
  • Assist with internal and external cybersecurity audits.
  • Coordinate evidence collection and remediation tracking.
  • Assess compliance with internal cybersecurity standards and regulatory requirements.
  • Support control assessments and gap analyses.
• Risk Reporting and Metrics
  • Develop risk metrics, dashboards, and management reports.
  • Prepare materials for management and governance reviews.
  • Escalate significant cybersecurity risk exposures and emerging trends.
  • Support enterprise cybersecurity reporting activities.
• Stakeholder Engagement
  • Collaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams.
  • Provide guidance on cybersecurity risk management processes and requirements.
  • Facilitate risk reviews and risk treatment discussions with stakeholders.
  • Promote cybersecurity awareness and risk-informed decision making.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Risk Management, or related discipline.
• 10+ years of experience in cybersecurity, risk management, audit, compliance, or information security.
• Knowledge of cybersecurity risk management methodologies and control frameworks.
• Ability to analyze complex technical and business risks.
• Strong written, presentation, and communication skills.
• Knowledge of common cybersecurity frameworks and regulations (e.g., NIST, ISO 27001, GDPR).
• Relevant certifications such as CompTIA Security+ or CISSP are a plus.
• Excellent analytical and problem-solving skills.

Benefits

• Industry-leading benefits, support, and services that look after your holistic health and wellbeing.
• Flexible arrangements that work for you (role and location dependent).
• A sense of belonging, autonomy, freedom, and ownership.