Information Security Manager and Cyber Transformation Lead/世界最大級の損害保険会社の求人

Leadership

Provide the security leadership across Japan by deploying the global information security program and influencing IT and business executives whilst ensuring the local regulatory and business requirements are met.
Represent the Group CISO function as the Japan country Information Security leader.
Operate as the local subject matter expert & Leader

Technical / Assessment

Regularly assess and evaluate local country risk & control position against the KPI’s and information security risk management framework.
Support Japan regulatory assessment activities in relation to RISO & GIS domains, ensure partnership, visibility, and engagement to regional CRA, and global security GRC leadership.
Provide guidance and technical security advisory on local projects, become the local subject matter expert for our group security expectations to local stakeholders. Ensure security issues are appropriately escalated to relevant Regional and Global stakeholder where they relate to delivery priorities for the company Japan.

RISO Transformation & Change

Lead the security uplift of Japan’s legacy application estate. Drive local adoption of the company security processes, policy, and standards.
Support GIS and RISO portfolio delivery into Japan with local oversight and escalation to ensure that GIS objectives, transformation targets are effectively (and consistently) rolled out locally.
Ability to build plans and oversee local improvement and transformation aligning to our GIS program and RISO functional objectives.
Able to influence local the company Japan Technology, Operations, and business units to support, execute and prioritize RISO and GIS priorities.

Reporting and Governance

Provide regular country reporting on information security Key Performance Indicators (KPI) to the Japan, Regional, and Security leadership.
Support Local Board and senior management reporting and awareness on Cyber.
Build accurate inventory / registry of Japan security issues and exceptions, ensuring local disclosure and identification of security derogations.
Track and regularly review Japan security issues, and exceptions with owners and local management, as well as regional and group security management.
Monitor Third-Party Cyber Risk Management risks and support local management escalation discussions where necessary.

Experience

Experience leading Japan country information security requirements within a global FI, responsible for a breadth of security services. Hands on practical cyber acumen across technical security domains.
Professional certifications such as CISSP, CISM, or equivalent (preferred).
Strong knowledge of industry standards and frameworks (e.g., ISO 27001, NIST CSF, ISF SoGP).
Familiarity with Japanese regulatory standards and activity around Information Security (Japan FSA), covering data usage and protection, and technical specifications.
Demonstrated expertise in Incident Response and Incident Management.
Communication skills including the ability to develop and provide effective presentations to various audiences, including non-technical resources.
Experience working in an agile work style, Secure Dev Ops, Security in Software Security Delivery preferred.
Good understanding of cloud services and cloud development techniques, as well as cloud security.
Experience with Data Leakage prevention and protection (DLP) control design and process alignment within corporate structures.
Cyber transformation, project, and program planning experience for security control uplift, implementation, and improvement.

Knowledge, Skills, And Abilities

Strong organizational, analytical and customer service skills.
Japanese & English bilingual key requirement. Ability to work and partner with Japan stakeholders in Japanese, and regional and global stakeholders in English is a must have.
Ability to work effectively in a team/matrixed environment.
Effectively communicate risks and issues to various levels of the business and IT leadership.
Ability to work onsite regularly to ensure management of key stakeholder relationships.

外資系損害保険会社