Join Hitachi Cyber and help organizations strengthen their cybersecurity governance, risk management, and compliance programs.
We are seeking a Senior Information Security Consultant (GRC) to join our Professional Services team and support clients in building, assessing, and maturing their information security frameworks, regulatory compliance programs, risk management practices, and security governance initiatives.
This is a senior consulting role focused on delivering strategic security advisory services to enterprise clients across regulated industries, helping them navigate complex compliance requirements while strengthening their overall security posture.
What you'll do:
- Lead and deliver Governance, Risk & Compliance (GRC) consulting engagements for enterprise clients.
- Assess cybersecurity governance frameworks, policies, standards, procedures, and controls to identify risks, gaps, and improvement opportunities.
- Conduct risk assessments, control reviews, maturity assessments, and compliance readiness evaluations.
- Support clients in achieving and maintaining compliance with industry standards and regulations such as ISO 27001, NIST CSF, PCI DSS, SOC 2, GDPR, and other applicable frameworks.
- Develop and enhance information security policies, standards, procedures, and governance documentation.
- Facilitate risk workshops and collaborate with stakeholders to evaluate business, operational, and cybersecurity risks.
- Advise clients on security governance structures, third-party risk management, regulatory requirements, and security program development.
- Translate regulatory and compliance requirements into practical business and security recommendations.
- Produce high-quality assessment reports, risk registers, executive presentations, and remediation roadmaps.
- Contribute to pre-sales activities, proposal development, client presentations, and solution scoping.
- Mentor junior consultants and support the continuous improvement of Hitachi Cyber's GRC consulting services.
If you recognize yourself in the following, we'd love to meet you:
- 7+ years of experience in cybersecurity, information security consulting, compliance, risk management, or governance-related roles.
- Strong knowledge of governance frameworks, risk management methodologies, and security control frameworks.
- Hands-on experience with ISO 27001, NIST, PCI DSS, SOC 2, GDPR, and other cybersecurity or privacy regulations.
- Experience conducting risk assessments, gap analyses, compliance reviews, and audit support activities.
- Strong understanding of information security principles and enterprise security controls.
- Ability to communicate complex security and compliance concepts to both technical and non-technical audiences.
- Experience working directly with senior leadership, risk committees, auditors, and executive stakeholders.
- Professional certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer/Auditor, PCI ISA, or equivalent.
- Excellent communication, stakeholder management, facilitation, and report-writing skills.
- Fluent English communication skills.
- Willingness to travel as required.
Why Hitachi Cyber?
- Work with leading organizations on high-impact cybersecurity governance and compliance initiatives.
- Partner with experienced cybersecurity consultants and subject matter experts.
- Influence enterprise security programs, risk management practices, and regulatory compliance strategies.
- Join a people-first, collaborative, and rapidly growing cybersecurity organization.
- Gain exposure to diverse industries, regulatory environments, and international clients.
Apply now!
Thank you for your application. Only selected candidates will be contacted.