About the role
Key Responsibilities: • Strategic security advisory: Lead multi-quarter advisory engagements for assigned strategic accounts. Develop cybersecurity strategy, governance frameworks, and 3-year program roadmaps tailored to customer business priorities and risk appetite. • Regulatory and compliance readiness: Conduct readiness assessments and gap analyses against major frameworks including NIST CSF 2.0, CRI Profile v2.1, NYDFS Part 500, HIPAA, CMMC, ISO 27001, and SOC 2. Translate regulatory obligations into actionable remediation plans. • Virtual CISO (vCISO) engagements: Serve as fractional CISO for customers without a dedicated security executive — represent the security function in board meetings, partner with executives on risk decisions, and lead annual program reviews. • Security architecture and program design: Define target-state security architectures spanning identity, network, endpoint, cloud, and data layers. Align architecture decisions with customer's IT modernization roadmap and KDDI America's MXDR / SASE / managed services portfolio. • Incident response advisory: Provide post-incident advisory — root-cause analysis facilitation, executive communications, regulatory notification guidance, and program improvement recommendations. Partner with technical responders without owning operational response. • Customer relationship leadership: Build trusted, multi-year relationships with senior customer stakeholders. Serve as the senior point of contact for strategic accounts, coordinating with KAM Pre-sales, Delivery, and Customer Success teams to ensure aligned execution. • Thought leadership and practice development: Contribute to the development of KAM's advisory methodology, intellectual property, and service offerings. Mentor junior consultants and pre-sales engineers on consulting practices and customer engagement skills. • Bilateral KDDI Group collaboration: Bridge KDDI America and KDDI Japan (KJP / LAC) operations, leveraging the global KDDI Group's resources, threat intelligence, and customer relationships to deliver differentiated value to US-based clients.
Required Qualifications: • Minimum 10 years of professional experience in cybersecurity, information risk management, or related advisory roles. • At least 5 years in a senior consulting, advisory, or vCISO capacity — preferably with a Big 4 firm, a boutique cybersecurity consultancy, or an enterprise security leadership role. • Demonstrated experience leading multi-quarter advisory engagements with executive-level stakeholders (CIO, CISO, Board, Audit Committee). • Working knowledge of major cybersecurity frameworks — NIST CSF, ISO 27001/27002, CRI Profile, NYDFS Part 500, HIPAA Security Rule, CMMC, and CIS Controls. • Strong technical fluency across modern security architecture — identity (IAM, SSO, MFA), network (SASE, ZTNA, firewall), endpoint (EDR, MDM), cloud (AWS, Azure, M365), and data security (DLP, DSPM, SSPM). • Business-level proficiency in Japanese (reading, writing, speaking) — required for direct engagement with Japanese parent-company executives and KDDI Group teams in Japan. • Strong written and verbal communication skills at the executive level — including the ability to translate technical findings into business-language recommendations. • Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related field. Master's degree or MBA preferred. • At least one senior-level professional certification — CISSP, CISM, CISA, CRISC, or equivalent.
Compensation Range: $90,000 - $140,000 (depending on experience)