Cybersecurity Compliance Project Manager

Cybersecurity Compliance Project Manager

The Opportunity

As part of Hitachi Energy’s Cybersecurity Compliance business, you will play an important role in strengthening the cybersecurity posture that supports critical power‑grid technologies and operations across the United States. This role gives you the opportunity to shape how cybersecurity, regulatory compliance, and national‑security requirements are integrated into the systems and processes that help modernize, protect, and sustain the energy ecosystem. You will work with people across legal, technical, and business functions to translate U.S. cybersecurity regulations and international standards into actionable steps that keep our capabilities resilient and compliant.

In this position, you will guide the Cybersecurity Compliance Program with a focus on CFIUS obligations, U.S. and North American cybersecurity regulatory requirements, and internationally recognized standards such as NIST and ISO/IEC 27001. Your work will help maintain the trustworthiness, reliability, and security of technologies that enable safe and efficient power‑grid operations—including managing audit readiness, supporting assessments, and enabling continuous improvement in compliance processes and tools. The role will also support the program’s evolution toward more efficient, technology-enabled ways of working, including workflow automation, data-driven reporting, AI-enabled capabilities, and digital tools that improve regulatory monitoring, evidence management, control traceability, and audit readiness.

How You’ll Make an Impact

• Run the CFIUS Cybersecurity Compliance Program and maintain alignment with the National Security Agreement.
• Coordinate effectively with CFIUS Monitoring Agencies to support reporting and oversight expectations.
• Translate U.S. and North American cybersecurity regulatory requirements—including Covered Information Protection Plans (CIPP), DFARS, FAR-based cybersecurity clauses, NIST SP 800‑171/172, CMMC 2.0, and NERC CIP—into practical processes across the organization.
• Manage U.S. compliance activities connected to CFIUS, NIST CSF, NIST SP 800‑53, NIST SP 800‑171/172, CMMC 2.0, DFARS, NERC CIP, applicable federal Executive Orders, and other federal or sector-specific oversight obligations.
• Support mandatory reporting needs and maintain readiness for internal and external audits.
• Work with legal, technical, and business teams to maintain a proactive cybersecurity compliance posture.
• Support assessments and audits related to ISO 27001, ISMS, and application‑level reviews tied to CFIUS obligations.
• Drive continuous improvement in compliance tooling, workflows, and reporting, including ServiceNow, OneTrust, SharePoint migration efforts, Power Automate, Power BI, and responsible use of AI-enabled capabilities to reduce manual effort and improve audit readiness.
• Responsible for ensuring compliance with applicable external and internal regulations, procedures, and guidelines.

Your Background

• 5+ years of experience in IT, cybersecurity compliance, public policy, or legal/regulatory roles. 
• Demonstrated expertise in U.S. and North American cybersecurity regulations and control frameworks, including CFIUS NSA obligations, DFARS, FAR-based procurement requirements, NIST CSF, NIST SP 800‑53, NIST SP 800‑171/172, CMMC 2.0, and sector-specific standards such as NERC CIP.
• Strong understanding of global cybersecurity frameworks, including ISO/IEC 27001, UCF, IEC 62443, and how international standards can be mapped or harmonized with NIST-based controls.
• Experience working in a global, multicultural environment, collaborating across functions and time zones. 
• Excellent verbal and written communication skills in English; additional languages are a plus. 
• Bachelor’s degree required; Master’s degree or certifications (CISM, CISSP, PMP) preferred. 
• Flexibility to work across time zones and travel occasionally. 
• Experience improving compliance operations through GRC, IRM, workflow, reporting, or collaboration tools; familiarity with automation, AI-enabled analysis, or digital transformation initiatives is preferred.
• Must be already live in the United States to support this role.

More About Us

In this role, you will deepen your knowledge of cybersecurity frameworks that shape secure, reliable, and modern energy systems while engaging with skilled professionals across the industry.

• Opportunities to work on innovative technologies that shape the future of energy
• A collaborative environment with experienced professionals across the power industry
• Access to learning platforms and career development programs
• Attractive health and retirement benefits
• Paid leave and flexible work arrangements
• As part of the hiring process, Hitachi Energy conducts pre-employment background checks that may include verification of employment history, education, criminal records, and other relevant information, in accordance with applicable laws.
• For certain roles—particularly those involving access to sensitive information, financial responsibilities, client data, regulated environments, or security-sensitive functions—additional or more comprehensive background or security screenings may be required. These may include, but are not limited to, enhanced criminal history checks, credit history reviews (where legally permissible), sanctions screening, or other due diligence measures aligned with the responsibilities of the position.
• The scope and depth of any background or security review will be determined based on the nature of the role and business necessity, and will always be conducted in compliance with applicable federal, state, and local laws. Candidates will be notified and, where required, asked to provide consent prior to the initiation of any such checks.