Senior GRC Analyst

Hitachi Digital

We're Hitachi Digital, a company at the forefront of digital transformation and the fastest growing division of Hitachi Group. We're crucial to the company's strategy and ambition to become a premier global player in the massive and fast-moving digital transformation market.

Our group companies, including GlobalLogic, Hitachi Digital Services, Hitachi Vantara and more, offer comprehensive services that span the entire digital lifecycle, from initial idea to full-scale operation and the infrastructure to run it on. Hitachi Digital represents One Hitachi, integrating domain knowledge and digital capabilities, and harnessing the power of the entire portfolio of services, technologies, and partnerships, to accelerate synergy creation and make real-world impact for our customers and society as a whole.

Imagine the sheer breadth of talent it takes to unleash a digital future. We don't expect you to 'fit' every requirement – your life experience, character, perspective, and passion for achieving great things in the world are equally as important to us.

Job Description

Our Company Hitachi Digital is part of the Global Hitachi family. We balance innovation with an open, friendly culture and the backing of a long-established parent company, known for its ethical reputation. We guide customers from what's now to what's next by unlocking the value of their data and applications to solve their digital challenges, achieving outcomes that benefit both business and society. Our people are our biggest asset, they drive our innovation advantage and we strive to offer a flexible and collaborative workplace where they can thrive. Diversity of thought is welcomed.

What you'll bring:

• 6+ years of experience working in governance risk and compliance functions
• Strong/expert level understanding of trends in the industry for information security policy, audit, compliance, and risk management.
• Excellent soft skills are a must, we are looking for a strong people person, who is thoughtful in his or her approach to working on teams and working with people on other teams.
• Big 4 Audit and Compliance experience is highly desirable.
• Experience working with internal and external auditors to ensure compliance with regulatory frameworks.
• SOC audit experience is required.
• Experience with GDPR, J-SOX or SOX is highly desirable.
• A fluency in the language of cybersecurity.
• The ability to understand technical concepts and translate them to an assessment of risk.
• Experience with data protection and DLP concepts and operations.
• Excellent written and oral communication skills in English.
• Self-driven with an ability to quickly adapt to new technologies and variable in a dynamic and fast moving large scale project with tight deadline.
• Attention to Detail and quality is an absolute must.
• Willingness to work in an international team, with project meetings several time a week in odd hours to support the Americas, Europe and Asia.

The Team

We are the Hitachi Digital Global Information Security team, and we are passionate advocates of Information Security!

We have the primary responsibility for safeguarding the confidentiality, integrity, and availability of data, systems, and information in the enterprise.

We ensure that corporate systems are secure, and we make sure that products that we deliver to customers are free of security flaws and vulnerabilities.

Most relevant to this role, we assess, report, and seek to mitigate cybersecurity risk, as well as seek to comply with all proper law and regulation in the various jurisdictions in which the company operates.

We are out-of-the-box thinkers, and team players.

We constantly seek new and better ways of doing things.

We need highly motivated individuals to join our dynamic team who have positive attitudes and want to be part of something special.

We strive for nothing less than the very best information security program.

The Role

Support and advise the Director of GRC and the CISO on all related to risk and compliance for the enterprise.

Support and coordinate the annual risk assessment and the vendor risk process.

Coordinating between Internal Audit, external auditors, and other regulatory bodies to ensure compliance with applicable regulation and standards, including, but not limited to: SOC 2, SOX, GDPR, ISO 27001

Hand on experience in Vendor risk management, Client contractual compliance, review of client MSA and knowledge in security awareness and training.

Should have sound knowledge in KPI reporting and dashboard preparation.

Ensuring that information security policies, procedures and standards are periodically reviewed, up to date, and relevant for the enterprise.

Supporting the programs by which we ensure compliance by the employee base with information security policies, including acceptable use, and data protection.

Assist in coordination with the Disaster Recovery and Incident and Response teams to establish policy and procedure.