Project Cybersecurity Officer

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Our motivation is the mobility turnaround. To achieve this, our teams find innovative products and solutions that ensure the operation and reliability of the entire rail network and increase capacities on the rails.

Our projects are diverse. To make our teams even stronger, we are looking for your support. In return, we offer you an attractive overall package with the following benefits:

• Stronger together: Networking through internal networks and working in international teams
• Our drive: Together, we are laying the foundations for the digitization of the rail around the world, to get people safely to their destinations and to their loved ones!
• Attractive conditions: A secure and permanent job with a global company

The Project Cybersecurity Officer (P-CSO) reports directly to Head of Cybersecurity Discipline (HoD) in Singapore, collaborate with the Asia-Pacific Information Security Officer (AISO) and is the main point of contact for LTA regarding Cybersecurity process when it comes to projects.

• → Manage Cyber Security (operational security) activities for the projects, including incident management security monitoring, vulnerability management and data confidentiality & integrity.
• →Collaborate with Deployment Managers and Configuration Managers to provide operational security reports and metrics to the AISO and Project Managers.
• →Act as the primary incident handler, being the main point of contact for all critical and high severity security incidents and involving the AISO and relevant IS/IT Managers when required.
• →Supervise the implementation and ongoing operation of local security controls, solutions, and requirements, ensuring they are maintained effectively.
• →Engage early in projects to identify risks and define necessary security requirements.
• →Ensure compliance to General Specifications Appendix H of LTA tenders for their corresponding projects.
• →Provide the Cybersecurity input to the Country Incident Management Plan, implement them and monitor them.
• →Manage the cybersecurity risks associated with suppliers, in collaboration with the Procurement and the Compliance departments.
• →Perform a gap analysis between the LTA contracts, the ad-hoc demands and the requirements from PTOs.
• →Establish processes and checklist for the engineering and deployment teams that interface with customer assets to ensure cyber hygiene is followed.
• →Perform periodic audit of the engineering and deployment teams on application of cyber hygiene.
• →The person have a right of veto over any decision that may introduce security risks to the projects (e.g. projects or changes that could expose customers and internal systems to vulnerabilities, or the deployment of insecure software). This includes oversight of changes. The P-CSO identifies risks and potential business impacts, reports findings to the AISO, recommends necessary countermeasures, and provide lessons learned.

QUALIFICATIONS

• Bachelor’s Degree qualification in IT/ Computer Science / Computing or Equivalent
• Certification on any of the following standards: ISO/IEC 62443, ISO 27001, NIST, CIS Benchmarks

COMPETENCIES

• Minimum of 5 years’ experience in the cybersecurity domain
• Security Monitoring and Incident Response
• Security Architecture design
• Threat management 
• Vulnerability, configuration, policy and compliance cyber management tools
• Experience in Data Classification and Loss Prevention
• Privileged Access Management
• Ideally experience in managing security vendors and partners, (evaluating and selecting vendors, negotiating contracts, and overseeing vendor performance)
• Experience in regulatory compliance cyber assessments and remediation proposals
• Endpoint Security and Encryption
• Experience in implementing and managing SOC and SIEM systems
• Ability to drive Pen Testing campaigns
• Next Generation Firewall and Advanced Threat Prevention

SOFT SKILLS

• Leadership
• Customer-driven
• Multicultural
• Results-driven
• Ability to create customer intimacy
• Communication skills
• Ability to convince – including at senior management level
• Foster continuous improvement

We look forward to receiving your application in just a few clicks via our career portal.

For further information about Hitachi Rail as an employer visit us on www.hitachirail.com/careers

Equal opportunities and self-determined participation of severely disabled persons and persons of equal status as well as respectful cooperation are firmly anchored principles within Hitachi Rail and its subsidiaries. We also aim to offer all our equal opportunities to start a career and to receive training and further education in our company. We consciously promote diversity and togetherness in our teams.