Cybersecurity Consultant

A customer-facing strategic advisor who helps Japanese multinational enterprises in the US assess, design, and execute cybersecurity programs. This role bridges the gap between technical depth and business strategy, often serving as a virtual CISO (vCISO) for clients without a dedicated security executive., * Strategic security advisory: Lead multi-quarter advisory engagements for assigned strategic accounts. Develop cybersecurity strategy, governance frameworks, and 3-year program roadmaps tailored to customer business priorities and risk appetite.

• Regulatory and compliance readiness: Conduct readiness assessments and gap analyses against major frameworks including NIST CSF 2.0, CRI Profile v2.1, NYDFS Part 500, HIPAA, CMMC, ISO 27001, and SOC 2. Translate regulatory obligations into actionable remediation plans.
• Virtual CISO (vCISO) engagements: Serve as fractional CISO for customers without adedicated security executive - represent the security function in board meetings, partner with executives on risk decisions, and lead annual program reviews.
• Security architecture and program design: Define target-state security architectures spanning identity, network, endpoint, cloud, and data layers. Align architecture decisions with customer’s IT modernization roadmap and MXDR / SASE / managed services portfolio.
• Incident response advisory: Provide post-incident advisory - root-cause analysis facilitation, executive communications, regulatory notification guidance, and program improvement recommendations. Partner with technical responders without owning operational response.
• Customer relationship leadership: Build trusted, multi-year relationships with senior customer stakeholders. Serve as the senior point of contact for strategic accounts, coordinating with KAM Pre-sales, Delivery, and Customer Success teams to ensure aligned execution.
• Thought leadership and practice development: Contribute to the development of KAM’s advisory methodology, intellectual property, and service offerings. Mentor junior consultants and pre-sales engineers on consulting practices and customer engagement skills.
• Bilateral collaboration: Bridge America and Japan (KJP / LAC) operations, leveraging its resources, threat intelligence, and customer relationships to deliver differentiated value to US-based clients.

[ Working Hours / Working style ] 9:00-17:00 / Hybrit (2-3days per week in office)

This role requires a Senior Cybersecurity Advisor to deliver strategic consulting, vCISO services, and compliance guidance to enterprise clients. Candidates need at least 10 years of cybersecurity experience, advanced certifications (such as CISSP), and business-level Japanese to bridge global operations with a Japanese parent company., * Minimum 10 years of professional experience in cybersecurity, information risk management, or related advisory roles.

• At least 5 years in a senior consulting, advisory, or vCISO capacity - preferably with a Big 4 firm, a boutique cybersecurity consultancy, or an enterprise security leadership role.
• Demonstrated experience leading multi-quarter advisory engagements with executive level stakeholders (CIO, CISO, Board, Audit Committee).
• Working knowledge of major cybersecurity frameworks - NIST CSF, ISO 27001/27002, CRI Profile, NYDFS Part 500, HIPAA Security Rule, CMMC, and CIS Controls.
• Strong technical fluency across modern security architecture - identity (IAM, SSO, MFA), network (SASE, ZTNA, firewall), endpoint (EDR, MDM), cloud (AWS, Azure, M365), and data security (DLP, DSPM, SSPM).
• Business-level proficiency in Japanese (reading, writing, speaking) - required for direct engagement with Japanese parent-company executives and a teams in Japan.
• Strong written and verbal communication skills at the executive level - including the ability to translate technical findings into business-language recommendations.
• Bachelor’s degree in Computer Science, Information Systems, Engineering, Business, or a related field. Master’s degree or MBA preferred.
• At least one senior-level professional certification - CISSP, CISM, CISA, CRISC, or equivalent., * Business-level proficiency in English (reading, writing, speaking) - strongly preferred for direct engagement with US-based customer executives, KAM internal collaboration, and US regulatory documentation.
• Prior experience working with Japanese multinational corporations in the United States, ideally in the manufacturing, financial services, trading company, or insurance sectors.
• Specialized certifications in advisory or governance domains - CGEIT, CDPSE, OSCP, AWS / Azure security specialty, or NIST RMF.
• Experience with the its service portfolio (MXDR, SASE, SD-WAN, managed cloud), Exaforce, CrowdStrike, Microsoft Defender, or other partner ecosystem vendors.
• Background in incident response, threat intelligence, security operations, or red team / pentest disciplines.
• Published thought leadership - conference talks, papers, certifications board membership, or peer-recognized contributions to the security community.