Project Cybersecurity Officer

Hitachi Rail Limited; Singapore; On-site; SGD 120,000 - 150,000; Full time

Job summary

Hitachi Rail Limited is seeking a Project Cybersecurity Officer (P-CSO) at the Singapore location. The role reports to the Head of Cybersecurity Discipline in Singapore and collaborates with the APAC AISO to act as the primary contact for LTA cybersecurity compliance on projects.

Key responsibilities include managing operational security activities, coordinating with deployment and configuration managers, handling major incidents, and ensuring cyber hygiene across engineering and deployment

Qualifications

• Bachelor’s Degree qualification in IT/ Computer Science / Computing or Equivalent.
• Certification on ISO/IEC 62443, ISO 27001, NIST, CIS Benchmarks.

Responsibilities

• Manage Cyber Security (operational security) activities for the projects, including incident management, security monitoring, vulnerability management, and data confidentiality & integrity.
• Collaborate with Deployment Managers and Configuration Managers to provide operational security reports and metrics to the AISO and Project Managers.
• Act as the primary incident handler, being the main point of contact for all critical and high severity security incidents and involving the AISO and IS/IT Managers as required.
• Supervise the implementation and ongoing operation of local security controls, solutions, and requirements, ensuring they are maintained effectively.
• Engage early in projects to identify risks and define necessary security requirements.
• Ensure compliance to General Specifications Appendix H of LTA tenders for their corresponding projects.
• Provide the Cybersecurity input to the Country Incident Management Plan, implement and monitor them.
• Manage the cybersecurity risks associated with suppliers, in collaboration with Procurement and Compliance departments.
• Perform a gap analysis between the LTA contracts, ad-hoc demands and PTO requirements.
• Establish processes and checklists for engineering and deployment teams that interface with customer assets to ensure cyber hygiene is followed.
• Perform periodic audit of the engineering and deployment teams on application of cyber hygiene.
• The person has a right of veto over any decision that may introduce security risks to the projects, including oversight of changes.

Skills

Security Monitoring

Incident Response

Security Architecture

Threat Management

Vulnerability Management

Data Classification & DLP

Privileged Access Management

Vendor Management

Regulatory Compliance

Endpoint Security

SOC & SIEM

Pen Testing

Firewall & Threat Prevention

Leadership

Communication

Continuous Improvement

Education

Bachelor’s Degree in IT/ Computer Science / Computing or Equivalent

ISO/IEC 62443

ISO 27001

NIST

CIS Benchmarks

Job description

Project Cybersecurity Officer (Ref.No. R1012647)

at our location in Singapore

TheProject Cybersecurity Officer (P-CSO) reports directly to Head of CybersecurityDiscipline (HoD) in Singapore, collaborate with the Asia-Pacific InformationSecurity Officer (AISO) and is the main point of contact for LTA regardingCybersecurity process when it comes to projects.

You will enjoy having these responsibilities:

• Manage Cyber Security (operational security) activities for the projects, including incident management security monitoring, vulnerability management and data confidentiality & integrity.
• Collaborate with Deployment Managers and Configuration Managers to provide operational security reports and metrics to the AISO and Project Managers.
• Act as the primary incident handler, being the main point of contact for all critical and high severity security incidents and involving the AISO and relevant IS/IT Managers when required.
• Supervise the implementation and ongoing operation of local security controls, solutions, and requirements, ensuring they are maintained effectively.
• Engage early in projects to identify risks and define necessary security requirements.
• Ensure compliance to General Specifications Appendix H of LTA tenders for their corresponding projects.
• Provide the Cybersecurity input to the Country Incident Management Plan, implement them and monitor them.
• Manage the cybersecurity risks associated with suppliers, in collaboration with the Procurement and the Compliance departments.
• Perform a gap analysis between the LTA contracts, the ad-hoc demands and the requirements from PTOs.
• Establish processes and checklist for the engineering and deployment teams that interface with customer assets to ensure cyber hygiene is followed.
• Perform periodic audit of the engineering and deployment teams on application of cyber hygiene.
• The person have a right of veto over any decision that may introduce security risks to the projects (e.g. projects or changes that could expose customers and internal systems to vulnerabilities, or the deployment of insecure software). This includes oversight of changes. The P-CSO identifies risks and potential business impacts, reports findings to the AISO, recommends necessary countermeasures, and provide lessons learned.

You have:

QUALIFICATIONS

• Bachelor’s Degree qualification in IT/ Computer Science / Computing or Equivalent
• Certification on any of the following standards: ISO/IEC 62443, ISO 27001, NIST, CIS Benchmarks

COMPETENCIES

• Minimum of 5 years’ experience in the cybersecurity domain
• Security Monitoring and Incident Response
• Security Architecture design
• Threat management
• Vulnerability, configuration, policy and compliance cyber management tools
• Experience in Data Classification and Loss Prevention
• Privileged Access Management
• Ideally experience in managing security vendors and partners, (evaluating and selecting vendors, negotiating contracts, and overseeing vendor performance)
• Experience in regulatory compliance cyber assessments and remediation proposals
• Endpoint Security and Encryption
• Experience in implementing and managing SOC and SIEM systems
• Ability to drive Pen Testing campaigns
• Next Generation Firewall and Advanced Threat Prevention

SOFT SKILLS

• Leadership
• Customer-driven
• Multicultural
• Results-driven
• Ability to create customer intimacy
• Communication skills
• Ability to convince – including at senior management level
• Foster continuous improvement