Cybersecurity Compliance Analyst

$83,200 - $93,600/Yr

Hitachi - Gardena, CA

Full-time - Mid Level

Gardena, CA

10,001+ employees

Furniture, Home Furnishings, Electronics, and Appliance Retailers

About the position

Hitachi America, Ltd. is seeking a Cybersecurity Compliance Analyst to join its Information Security and Risk Management Division (ISRD) in the Americas region. This position is crucial for enhancing the cybersecurity maturity level across various subsidiaries while effectively mitigating information security risks. The ideal candidate will have hands-on experience in cybersecurity audits and assessments across different industries, along with a solid understanding of the evolving threat landscape and relevant technologies. The role requires a proactive individual with excellent communication skills to collaborate effectively with stakeholders across various departments and subsidiaries. The primary objective of this role is to support the establishment and promotion of a robust global information security governance model tailored to the specific needs of the region and the industries in which Hitachi operates. The Cybersecurity Compliance Analyst will assist the Head of Cybersecurity of the America Branch by guiding subsidiaries in implementing proactive security measures and fostering a culture of security awareness. This position plays a pivotal role in safeguarding Hitachi's assets and data, ultimately contributing to the company's overall resilience against evolving cyber threats. In this role, the analyst will perform security assessments of subsidiaries' information security management systems, infrastructure, data management, and access controls. They will document findings related to security risks and vulnerabilities and advise on improvements to enhance the overall cybersecurity posture. Additionally, the analyst will assist subsidiaries in ensuring compliance with relevant regulations and standards, promoting governance frameworks to manage information security risks effectively. The role also involves fostering a culture of cybersecurity awareness through communication and collaboration with stakeholders, as well as staying informed about the latest cybersecurity trends and technologies to continually enhance the organization's security practices.

Responsibilities

• Perform assessment of subsidiaries' current information security management system, infrastructure, data flow/management, network/identity access control, vulnerability management, etc.
• Document findings such as security risks, vulnerabilities and threats, and advise possible improvements to enhance overall cybersecurity posture.
• Assist subsidiaries to ensure compliance with relevant regulations and standards and promote governance frameworks to manage information security risks effectively.
• Work closely with stakeholders across departments and subsidiaries in the Americas region to foster a culture of cybersecurity awareness and collaboration.
• Support bi-annual educational workshops or meetings for the Americas Region.
• Stay informed about the latest cybersecurity trends, threats, and technologies to continually enhance the organization's security posture.

Requirements

• Bachelor's degree in computer science, Information Systems, or equivalent education or work experience
• 4+ years of experience in Security Audits and Assessments of various sized organizations in different industries
• Knowledge of relevant regulations and standards (e.g., GDPR, ISO 27001, NIST, FERPA) and experience in ensuring compliance within a multinational environment
• Knowledge of desktop, server, application, database, network security principles for risk identification and analysis
• Strong analytical and problem-solving skills with the ability to assess and mitigate security risks effectively
• Excellent written, presentation and communication skills with the ability to effectively convey complex security concepts to both technical and non-technical stakeholders
• Ability to work independently and collaboratively in a dynamic and fast-paced environment, managing multiple priorities effectively
• General understanding of Cloud and On-Prem Security Architecture
• General understanding of the impact of economic, cultural, geopolitical events in relation to cybersecurity trends/motives

Nice-to-haves

• CISA, CISSP, CISM, CRISC or other relevant designation preferred
• Proficiency in Japanese reading/writing would be a plus
• OT and product security knowledge or working in such environment a plus

Benefits

• Eligible to participate in Hitachi America's variable pay program, subject to the program's conditions and restrictions.