Cyber Security & Technology Risk Consultant (H)

Position Overview

HCLTech Japan is seeking two bilingual Cyber Security & Technology Risk Consultants to support Cisco’s security governance, compliance, and IT audit activities in Japan. The role is primarily focused on IT audit, ISMAP security assessments, IT control evaluations, audit documentation, evidence management, remediation support, continuous compliance monitoring, and stakeholder coordination across Japanese and global teams.
 

Key Responsibilities

• Support multiple ISMAP security assessment and audit cycles, including planning, control assessment, walkthroughs, evidence collection, documentation, and follow-up activities.
• Assess and document IT General Controls (ITGC), IT Application Controls (ITAC), and other internal security and technology controls.
• Manage audit evidence requests, trackers, control narratives, risk and issue logs, remediation actions, and audit-ready documentation.
• Coordinate with engineering, information security, compliance, legal, risk, and business stakeholders in Japan and globally.
• Facilitate control walkthroughs, status meetings, and audit discussions in both Japanese and English.
• Support IT governance, security compliance, IT risk assessments, and continuous compliance monitoring.
• Lead assigned workstreams, manage priorities and dependencies, and provide clear status reporting to project stakeholders.
• Contribute to the evaluation of controls related to SDLC, identity and access management, disaster recovery, vulnerability management, cloud services, and change management.

Required Qualifications

• Bilingual communication capability: business-level Japanese and business-level English.
• Solid professional experience in IT Audit, IT Governance, Security Compliance, Technology Risk, or related control-assurance work within highly regulated environments.
• Experience supporting security assessments and IT control evaluations, with a strong understanding of audit methodologies, internal controls, and evidence requirements.
• Hands-on experience with ISMAP assessments or closely related security-control frameworks and certification programs.
• Working knowledge of ITGC, ITAC, IT risk assessment, internal controls, security governance, and compliance documentation.
• Ability to facilitate discussions and walkthroughs in English with global engineering and compliance teams, and to coordinate effectively with Japanese stakeholders.
•  Proven ability to lead assigned workstreams, manage multiple priorities, and coordinate cross-functional stakeholders in fast-paced projects.
•  Knowledge of SDLC, identity and access management, disaster recovery, vulnerability management, and cloud/control environments.

Preferred Certifications

•  ISO/IEC 27001 Lead Implementer (LI) or Lead Auditor (LA).
• CISA, CISSP, CISM, CRISC, or another relevant and valid security / audit certification.

Core Skills

• IT Audit • ISMAP • IT Governance • Security Compliance • Technology Risk / IT Risk Assessment • ITGC • ITAC • Internal Controls • Audit Documentation & Evidence Management • Security Control Assessment • Remediation Tracking • Project & Stakeholder Management • Cross-Functional Coordination • Japanese & English Meeting Facilitation • Stakeholder Communication & Documentation