Job Description
Hitachi is seeking a skilled Cybersecurity Professional to protect our information systems and data from cyber threats.
The Cybersecurity Risk Professional supports the enterprise Cybersecurity Risk Management Program by identifying, assessing, monitoring, and reporting cybersecurity risks across the organization.
The role partners with business units, technology teams, control owners, and cybersecurity stakeholders to ensure risks are appropriately evaluated, documented, mitigated, and communicated in accordance with established cybersecurity governance requirements and risk appetite statements.
Cybersecurity Risk Management
Conduct cybersecurity risk assessments for technology, business, and operational initiatives.
Analyze threats, vulnerabilities, and control effectiveness to determine residual risk.
Maintain and update cybersecurity risk registers.
Evaluate risks against approved risk appetite and risk tolerance thresholds.
Track risk mitigation and remediation activities through closure.
Governance and Oversight
Support the operation of the Cybersecurity Risk and Control Framework (CRCF).
Challenge the completeness and accuracy of risk assessments and mitigation plans.
Monitor adherence to cybersecurity policies, standards, and control requirements.
Assist with exception and risk acceptance reviews.
Support cybersecurity governance forums and reporting activities.
Compliance and Audit Support
Assist with internal and external cybersecurity audits.
Coordinate evidence collection and remediation tracking.
Assess compliance with internal cybersecurity standards and regulatory requirements.
Support control assessments and gap analyses.
Risk Reporting and Metrics
Develop risk metrics, dashboards, and management reports.
Prepare materials for management and governance reviews.




Escalate significant cybersecurity risk exposures and emerging trends.
Support enterprise cybersecurity reporting activities.
Stakeholder Engagement
Collaborate with IT, Product Security, IAM, Legal, Procurement, Privacy, and business teams.
Provide guidance on cybersecurity risk management processes and requirements.
Facilitate risk reviews and risk treatment discussions with stakeholders.
Promote cybersecurity awareness and risk-informed decision making.
What You'll Bring
Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Risk Management, or related discipline.
10+ years of experience in cybersecurity, risk management, audit, compliance, or information security.
Knowledge of cybersecurity risk management methodologies and control frameworks.
Ability to analyze complex technical and business risks.
Strong written, presentation, and communication skills.
Knowledge of common cybersecurity frameworks and regulations (e.g., NIST, ISO *****, GDPR).
Relevant certifications such as CompTIA Security+ or CISSP are a plus.
Excellent analytical and problem-solving skills.
Benefits
We help take care of your today and tomorrow with industry‐leading benefits, support, and services that look after your holistic health and wellbeing.
We're also champions of life balance and offer adaptable arrangements that work for you (role and location dependent).
We're proud to say we're an equal‐opportunity employer and welcome all applicants for employment without attention to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, age, disability status or any other protected characteristic.
Should you need reasonable accommodations during the recruitment process, please let us know so that we can do our best to set you up for success.
#J-*****-Ljbffr

📌 Cybersecurity Professional (Nuevo León)
🏢 Hitachi Vantara
📍 Nuevo León