Cybersecurity Compliance Project Manager

Hitachi Energy; Georgia; On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health and retirement benefits

Paid leave and flexible work

Job summary

Hitachi Energy is seeking a Cybersecurity Compliance Project Manager in the United States to lead the CFIUS program and align with NSA obligations. You will coordinate with monitoring agencies and translate complex regulatory requirements into practical, scalable processes across legal, technical, and business teams.

The role focuses on NIST, CMMC, DFARS, and NERC CIP, with a drive for continuous improvement in compliance tooling and reporting, including AI-enabled capabilities to reduce manual

Qualifications

• 5+ years in IT, cybersecurity compliance, public policy, or legal/regulatory roles.
• Expertise in U.S./NA cybersecurity regulations and control frameworks (CFIUS NSA, DFARS, FAR, NIST CSF, NIST SP 800-53/171/172, CMMC 2.0, NERC CIP).
• Knowledge of ISO/IEC 27001, IEC 62443 and mapping to NIST controls.
• Experience in global, multicultural environments across functions/time zones.
• Excellent English communication; additional languages a plus.
• Bachelor's degree required; advanced degrees or certifications preferred.

Responsibilities

• Lead the CFIUS Cybersecurity Compliance Program and maintain NSA alignment.
• Coordinate with CFIUS Monitoring Agencies for reporting and oversight.
• Translate regulatory requirements into practical processes across the organization.
• Manage compliance activities related to NIST, CMMC, DFARS, NERC CIP, and related standards.
• Support reporting, audits, and evidence management to maintain readiness.
• Drive improvements in tooling, workflows, and AI-enabled capabilities for regulatory monitoring.

Skills

Cybersecurity compliance

Regulatory knowledge

Communication skills

GRC tooling

Bachelor's degree

Education

Bachelor's degree

Master's degree

Certifications (CISM, CISSP, PMP)

Tools

ServiceNow

OneTrust

SharePoint

Power Automate

Power BI

Job description

Cybersecurity Compliance Project Manager

The Opportunity

As part of Hitachi Energy's Cybersecurity Compliance business, you will play an important role in strengthening the cybersecurity posture that supports critical powergrid technologies and operations across the United States. This role gives you the opportunity to shape how cybersecurity, regulatory compliance, and nationalsecurity requirements are integrated into the systems and processes that help modernize, protect, and sustain the energy ecosystem. You will work with people across legal, technical, and business functions to translate U.S. cybersecurity regulations and international standards into actionable steps that keep our capabilities resilient and compliant.

In this position, you will guide the Cybersecurity Compliance Program with a focus on CFIUS obligations, U.S. and North American cybersecurity regulatory requirements, and internationally recognized standards such as NIST and ISO/IEC 27001. Your work will help maintain the trustworthiness, reliability, and security of technologies that enable safe and efficient powergrid operations—including managing audit readiness, supporting assessments, and enabling continuous improvement in compliance processes and tools. The role will also support the program's evolution toward more efficient, technology-enabled ways of working, including workflow automation, data-driven reporting, AI-enabled capabilities, and digital tools that improve regulatory monitoring, evidence management, control traceability, and audit readiness.

How You'll Make an Impact

• Run the CFIUS Cybersecurity Compliance Program and maintain alignment with the National Security Agreement.
• Coordinate effectively with CFIUS Monitoring Agencies to support reporting and oversight expectations.
• Translate U.S. and North American cybersecurity regulatory requirements—including Covered Information Protection Plans (CIPP), DFARS, FAR-based cybersecurity clauses, NIST SP 800-171/172, CMMC 2.0, and NERC CIP—into practical processes across the organization.
• Manage U.S. compliance activities connected to CFIUS, NIST CSF, NIST SP 800-53, NIST SP 800-171/172, CMMC 2.0, DFARS, NERC CIP, applicable federal Executive Orders, and other federal or sector‑specific oversight obligations.
• Support mandatory reporting needs and maintain readiness for internal and external audits.
• Work with legal, technical, and business teams to maintain a proactive cybersecurity compliance posture.
• Support assessments and audits related to ISO 27001, ISMS, and application‑level reviews tied to CFIUS obligations.
• Drive continuous improvement in compliance tooling, workflows, and reporting, including ServiceNow, OneTrust, SharePoint migration efforts, Power Automate, Power BI, and responsible use of AI‑enabled capabilities to reduce manual effort and improve audit readiness.
• Responsible for ensuring compliance with applicable external and internal regulations, procedures, and guidelines.

Your Background

• 5+ years of experience in IT, cybersecurity compliance, public policy, or legal/regulatory roles.
• Demonstrated expertise in U.S. and North American cybersecurity regulations and control frameworks, including CFIUS NSA obligations, DFARS, FAR-based procurement requirements, NIST CSF, NIST SP 800-53, NIST SP 800-171/172, CMMC 2.0, and sector-specific standards such as NERC CIP.
• Strong understanding of global cybersecurity frameworks, including ISO/IEC 27001, UCF, IEC 62443, and how international standards can be mapped or harmonized with NIST-based controls.
• Experience working in a global, multicultural environment, collaborating across functions and time zones.
• Excellent verbal and written communication skills in English; additional languages are a plus.
• Bachelor's degree required; Master's degree or certifications (CISM, CISSP, PMP) preferred.
• Flexibility to work across time zones and travel occasionally.
• Experience improving compliance operations through GRC, IRM, workflow, reporting, or collaboration tools; familiarity with automation, AI-enabled analysis, or digital transformation initiatives is preferred.
• Must be already live in the United States to support this role.

More About Us

In this role, you will deepen your knowledge of cybersecurity frameworks that shape secure, reliable, and modern energy systems while engaging with skilled professionals across the industry.

• Opportunities to work on innovative technologies that shape the future of energy
• A collaborative environment with experienced professionals across the power industry
• Access to learning platforms and career development programs
• Attractive health and retirement benefits
• Paid leave and flexible work arrangements
• As part of the hiring process, Hitachi Energy conducts pre-employment background checks that may include verification of employment history, education, criminal records, and other relevant information, in accordance with applicable laws.
• For certain roles—particularly those involving access to sensitive information, financial responsibilities, client data, regulated environments, or security-sensitive functions—additional or more comprehensive background or security screenings may be required. These may include, but are not limited to, enhanced criminal history checks, credit history reviews (where legally permissible), sanctions screening, or other due diligence measures aligned with the responsibilities of the position.
• The scope and depth of any background or security review will be determined based on the nature of the role and business necessity, and will always be conducted in compliance with applicable federal, state, and local laws. Candidates will be notified and, where required, asked to provide consent prior to the initiation of any such checks.