Security Program Lead — Risk, Compliance & SDLC

Hitachi; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Hitachi Vantara LLC is seeking an experienced Security Program Manager to lead security initiatives, develop roadmaps, and align programs with business objectives across the United States. You will manage vulnerabilities, audits, and incident response, collaborate with IT, engineering, and product teams, and drive ongoing improvements to our security posture and regulatory compliance.

Responsibilities include governance across NIST, ISO 27001, GDPR, and other frameworks, building awareness

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field; Master’s degree preferred.
• 7+ years of progressive experience in information security, with at least 3 years in a security program management role.
• Proven experience in managing complex security programs and projects, utilizing project management methodologies (e.g., Agile, Waterfall).
• Strong understanding of information security principles, frameworks, and best practices (e.g., NIST, ISO 27001, COBIT).
• In-depth knowledge of various security domains, including application security, network security, cloud security, data protection, and identity and access management.
• Familiarity with regulatory compliance requirements (e.g., GDPR, CCPA, HIPAA, SOX).
• Certifications such as PMP, CISSP, CISM, CIPP/US, or equivalent are highly desirable.
• Excellent communication, interpersonal, and leadership skills with the ability to influence and collaborate effectively with technical and non-technical stakeholders.
• Strong analytical and problem-solving abilities, with a keen eye for detail.
• Ability to work independently and manage multiple priorities in a fast-paced environment.

Responsibilities

• Develop and implement comprehensive security programs, strategies, and roadmaps aligned with business objectives and industry best practices.
• Manage the full lifecycle of security projects, including planning, execution, monitoring, and reporting, ensuring projects are delivered on time and within budget.
• Lead cross-functional teams to identify, assess, and mitigate security risks across various systems, applications, and infrastructure.
• Establish and maintain security policies, standards, and procedures, ensuring adherence to regulatory frameworks such as NIST, ISO 27001, GDPR, and other relevant compliance mandates.
• Oversee vulnerability management, penetration testing, and security audit processes, driving remediation efforts and tracking progress.
• Collaborate with IT, engineering, and business units to integrate security requirements into the software development lifecycle (SDLC) and other operational processes.
• Develop and deliver security awareness training and education programs for employees across the organization.
• Manage security incident response plans, procedures, and exercises, ensuring effective and timely resolution of security incidents.
• Evaluate and recommend security technologies and solutions to enhance the organization’s security capabilities.
• Prepare and present security reports, metrics, and program updates to senior management and stakeholders.
• Stay current with emerging security threats, technologies, and industry trends to continuously improve our security posture.

Skills

Security program management

Project management

Regulatory compliance

Leadership

Communication

Risk assessment

Education

Bachelor’s degree in Computer Science/Information Technology/Cybersecurity

Master’s degree preferred

Job description

Hitachi Vantara LLC is seeking an experienced Security Program Manager to lead security initiatives, develop roadmaps, and align programs with business objectives across the United States. You will manage vulnerabilities, audits, and incident response, collaborate with IT, engineering, and product teams, and drive ongoing improvements to our security posture and regulatory compliance.

Responsibilities include governance across NIST, ISO 27001, GDPR, and other frameworks, building awareness