大手会計ファームグループ内シェアードサービス企業でのSupplier Risk Assurance Analyst（Senior Associate以上）の求人

The Supplier Risk Assurance program evaluates and monitors information security risk associated with the Firm’s use of third party technology suppliers. We measure risk against Firm security controls, industry standards, regulations and laws, and Our business practices. We then advise our engagement and project managers, our procurement team, and our Legal teams in the recommended treatment of the risk assessment conclusions.
In a working world where there is an increasing reliance on third party provided products and services the role offers interaction with some of the most interesting and important technology related activities of the Firm across the spectrum of services offered.
This role is an important and very visible contributor offering highly valued and critical services within a highly collaborative team environment. A more exciting challenge is difficult to find!

●Your key responsibilities
The person chosen will conduct inherent risk assessments, supplier research, reporting, data analytics, communications with our stakeholders, and other required tasks associated with the execution of the Supplier Risk Assurance mission.

●Skills and attributes for success
・Well-developed and creative analytic abilities to synthesize technical data, project related information, interview and survey results, and other information to inform risk decisions.
・Ability to manage and deliver on multiple and shifting priorities to provide high quality, timely, and effective service to our customers.
・Advanced interpersonal skills to engage and collaborate with multiple internal and external stakeholders within a matrixed and global organization.
・Highly developed communications skills, both oral and written in the English language
・Must be able to rapidly learn a complex business process that involves acquisition of knowledge and familiarity with related regulations, Our Policies and Standards, and international standards such as ISO 27001:2013, SOC 2, HITRUST, and PCI-DSS.
・Ability to manage projects and complex sets of tasks independently and supervising junior resources.
・Fluency in Japanese and English（日本語ビジネスレベル以上必須）

●To qualify for the role you must have:
Bachelor level or higher degree in computer science or related discipline such as engineering or an equivalent in experience (minimum of 3 years in a related function)
Two to three years of experience in any of the following: information security, IT risk management, internal audit, IT process and analytics, or compliance
Experience working with Information Security controls such as ISO27001:2013, NIST, or SOC.
Experience leading small to moderate sized projects.

●Ideally, you’ll also have
Certifications such as the Certified Information Systems Security Professional (CISSP), Global Security Essentials Certification (GSEC), or Certified in Risk and Information Systems Control (CRISC).
Good working knowledge of data analytic methods and tools, including but not limited to Spotfire, and Microsoft Excel. Good knowledge and skills with Microsoft Office and Sharepoint.
Experience, skills, or education in Information Security technical areas.

●What we look for
The ideal candidate will enjoy the challenge of rapid acquisition of knowledge and have the skills and determination to join a high performing team. We are looking for someone who is agile, flexible, serious about providing top flight service to our customers, and above all a great team member.