IT, Information Security Group, Cyber Security Specialist GG10
Job Summary Do you like to get involved in new technologies such as AI or machine learning? Our company is moving forward with promoting to leverage such new technologies further. We are looking for such new-technology-minded Cyber Security Specialists for the leading life insurance company based in Tokyo and also remotely work with offshore teams. Specifically, considering cyber security risk is the combination of threats and vulnerabilities, this role is to focus on ensuring the environment such as Application, Cloud and IT Infrastructure not to create/keep having vulnerabilities. Broadly, play a critical role of the Information Security Group to protect the confidentiality, integrity, and availability of the company’s and customer’s information through promoting our Global Information Security framework and relevant programs by working closely with other IT teams and related businesses.
Responsibilities ● Provide hands-on work for the daily activities and also propose solutions to the
improvement initiatives. ● Communicate and liaise proactively work with local and global counterparts for planning
and executing various Information Security activities.
Immediate focuses include: ● Drive application security program which is one of the high focused KPIs of the IT
department, such as governance of application vulnerability testing and ensuring a required remediation plan to be made and executed by a responsible application team.
● Act as a contact point for our application teams and external testing partners to manage application vulnerabilities.
● Plan and conduct an application security awareness program which includes ensuring secure coding practices.
● Promote “shift left” of implementing security solutions at an early stage of application life cycle which includes governance of thread analysis to be performed.
● Lead monitoring and tracking remediations of cloud and IT infrastructure vulnerabilities.
● Manage Web Application Firewall platform which includes onboarding a new application.
Requirements (Experience, Skills, Education) ● Minimum 3 years of relevant hands-on experience in Information Technology ● Experience or strong interest in Information Security related field ● Basic level English (intermediate level in read & write, conversation level in listen &
speak) and advanced level Japanese ● Ability to prepare accurate reports for all levels of staff in an appropriate clear language
and provide oral presentation ● Willing to learn new IT technologies and Information Security trend
Preferable ● Familiar with industry standards (NIST CSF, PCI DSS) ● Experience or interest in financial industry particularly life insurance
Others
Qualification ● CISSP or similar certification is a plus