Principal Strategic Cybersecurity Advisor (CISO Services)

Hitachi Systems Security Inc.

Winnipeg

On-site

CAD 170,000 - 250,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Employee Referral Bonus

Group insurance plan

Job summary

Hitachi Cyber seeks an accomplished CISO to provide strategic leadership, governance, and oversight of a comprehensive cybersecurity program. As a trusted advisor to executive leadership and the Board, you will drive strategy, risk management, and security governance to advance resilience across the organization.

The role emphasizes collaboration with business leaders, technology teams, clients, and external stakeholders to embed cybersecurity into all facets of the organization and strengthen

Qualifications

Minimum 10–15 years of progressive experience in cybersecurity or information security.
Experience serving as a CISO or vCISO is strongly preferred.
Lead enterprise cybersecurity programs within medium to large organizations.
Proven track record developing cybersecurity strategies and governance frameworks.
Extensive experience with ISMS and/or NIST/CIS frameworks.
Strong knowledge of ISO 27001/27002, NIST CSF, SOX, COBIT, COSO, PCI DSS, SOC, ITIL/ITSM.
Bachelor's degree in Information Security, CS, IT, Eng, or related discipline.
Master's degree or MBA is considered an asset.

Responsibilities

Develop and execute the organization's cybersecurity strategy, roadmap, governance framework, and security policies.
Serve as the primary cybersecurity advisor to executive leadership and the Board.
Promote cybersecurity accountability and best practices across the organization.
Lead enterprise cyber risk management, including risk assessments, maturity reviews, and remediation planning.
Establish cybersecurity metrics and reporting to monitor risk and program performance.
Oversee cybersecurity operations, including vulnerability management, threat monitoring, and incident response.
Lead incident response planning, crisis management, and recovery efforts.
Ensure compliance with applicable regulations, industry standards, and security frameworks.
Oversee audits, assessments, and remediation of identified security and compliance gaps.
Advise executive leadership on cybersecurity risks, priorities, and strategic initiatives.
Deliver Board-level reporting and translate technical risks into business-focused recommendations.
Support strategic initiatives through client engagement, thought leadership, and industry representation.
Monitor emerging threats, technologies, and regulatory developments while providing guidance on security investments.

Skills

CISO experience

Enterprise cybersecurity leadership

Cybersecurity frameworks

Governance & risk management

Board/exec advisory

Education

Bachelor's degree in Information Security / CS / IT / Eng

Master's degree / MBA asset

Relevant postgraduate qualifications

ISO 27001 Lead Implementer/Auditor (preferred)

Tools

ISMS/NIST/CIS frameworks

PCI DSS / COBIT / COSO / SOX

Job description

Join Hitachi Cyber and play a pivotal role in shaping and advancing our client's cybersecurity strategy, governance, risk management, and organizational resilience.

The Chief Information Security Officer (CISO) is responsible for providing strategic leadership, governance, and oversight of the organization's cybersecurity program. Acting as the principal advisor to executive leadership, governance committees, and the Board of Directors, the CISO is accountable for establishing and maintaining a comprehensive cybersecurity strategy, risk management framework, and security governance model that aligns with organizational objectives.

As a trusted cybersecurity leader and advisor, the CISO drives the development and implementation of enterprise security programs, cybersecurity roadmaps, while ensuring compliance with legal, regulatory, contractual, and industry requirements. The role requires close collaboration with business leaders, technology teams, clients, and external stakeholders to embed cybersecurity into all aspects of the organization and strengthen overall cyber resilience.

This position provides strategic CISO services to client organizations and is not the internal CISO role within Hitachi Cyber.

What you will do:

Cybersecurity Strategy & Governance

Develop and execute the organization's cybersecurity strategy, roadmap, governance framework, and security policies.
Serve as the primary cybersecurity advisor to executive leadership and the Board of Directors.
Promote cybersecurity accountability and best practices across the organization.

Cyber Risk Management

Lead enterprise cyber risk management, including risk assessments, maturity reviews, and remediation planning.
Establish cybersecurity metrics and reporting to monitor risk and program performance.

Security Operations, Incident Response & Compliance

Oversee cybersecurity operations, including vulnerability management, threat monitoring, and incident response.
Lead incident response planning, crisis management, and recovery efforts.
Ensure compliance with applicable regulations, industry standards, and security frameworks.
Oversee audits, assessments, and remediation of identified security and compliance gaps.

Executive Advisory & Stakeholder Engagement

Advise executive leadership on cybersecurity risks, priorities, and strategic initiatives.
Deliver Board-level reporting and translate technical risks into business-focused recommendations.

Business Development & Industry Leadership

Support strategic initiatives through client engagement, thought leadership, and industry representation.
Monitor emerging threats, technologies, and regulatory developments while providing guidance on security investments and transformation programs.

If you recognize yourself in the following, we'd love to meet you:

Minimum 10–15 years of progressive experience in cybersecurity, information security, technology risk, or a related discipline.
Experience serving as a CISO or vCISO is strongly preferred.
Demonstrated experience leading enterprise cybersecurity programs within medium to large, complex organizations.
Proven track record of developing and implementing cybersecurity strategies, governance frameworks, and risk management programs.
Extensive experience establishing or operating industry frameworks (ISMS and/or NIST and/or CIS).
Strong knowledge and practical experience with cybersecurity frameworks and standards, including ISO 27001/27002, NIST CSF, SOX, COBIT, COSO, PCI DSS, SOC, and ITIL/ITSM.
Preffered certifications:
- CISSP
- CISM
- CISA
- CRISC
- ISO 27001 Lead Implementer or Lead Auditor
- CGEIT
Bachelor's degree in Information Security, Computer Science, Information Technology, Engineering, Business Information Systems, or a related discipline.
Master's degree, MBA, or postgraduate qualification in Cybersecurity, Information Technology, Risk Management, or Business Administration is considered an asset.