Cybersecurity Manager

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Cybersecurity Manager

About the Role

Cybersecurity Manager provides assurance evidence and process discipline across safety, RAM, quality, cybersecurity, HSE or human factors, supporting design maturity, approvals, test readiness, acceptance and operational readiness. Its specific contribution is to define security requirements; support hardening and secure configurations; manage vulnerability responses and evidence.

Key Responsibilities

• Define cybersecurity management plan, security requirements, risk assessments, hardening baselines and evidence strategy.

• Coordinate cybersecurity across all systems, remote access and supplier configurations.

• Review supplier designs, accounts/privileges, logging, patching, vulnerability handling and secure commissioning arrangements.

• Plan security tests, support incident-response preparation and define handover requirements for operator/maintainer security teams.

• Assess cybersecurity impact of changes, defects, temporary configurations and remote-support proposals.

• Apply the Hitachi Code of Conduct in role-specific decisions, including ethical escalation, anti-bribery discipline, confidentiality, data protection, fair supplier/customer conduct and transparent records.

• Manage vulnerability responses and evidence.

• Functional authority on cybersecurity controls and secure-change principles.

• Can block or escalate non-compliant security design/deployment decisions.

Key Interfaces

• Engineering Manager, Solution Engineering Manager, WPLs and IVVQ/T&C teams.

• Customer cybersecurity stakeholders, operator IT/OT teams and supplier security specialists.

• Safety, RAM, Quality and Configuration/Defect Manager for assurance and baseline impacts.

• Design reviews.

• Release/change reviews.

• Incident/defect boards when cyber-related.

Authority & Accountability

• Accountable for cybersecurity assurance approach and evidence quality.

• Authorised to reject insecure configurations, request remediation and recommend security hold points.

• Escalates unresolved security risks to Engineering Manager and Project Manager.

Mandate

Ensure the delivered IT/OT solution is acceptably secure, supportable and aligned with Project safety, availability and operational requirements.

Skills & Experience

• Cybersecurity experience in rail, industrial control, OT networks or critical infrastructure.

• Knowledge of IEC 62443/NIS-style principles, secure architecture, hardening, vulnerability and access management.

• Ability to balance security controls with safety, availability and maintainability.

• Resilience and resistance to stress during security findings, late configuration changes and commissioning windows.

• Confidentiality, ethical judgement and technical credibility.

• More than 5 years in OT/rail/industrial cybersecurity, hardening, vulnerability response and security-by-design.