リスク・監査、1800〜2000万の転職求人

Responsibilities：
・Develop and implement a comprehensive CTD strategy and roadmap (including the deployment the MITRE ATTACK framework, defense in depth, and other best practices) to safeguard the organization’s infrastructure, systems, and data from security threats.
・Lead the Cyber Fusion Center, which includes the Security Operations Center (SOC), Cyber Threal Intel, and Incident Response teams.
・Note that eventually the Cyber Fusion Center will include other activities such anti-fraud and physical access.
・Oversee the detection of cybersecurity events in real time through centralized monitoring.
・Analyze cybersecurity events from multiple sources such as SIEM, IDS/IPS, EDR, AV, Firewalls, etc.
・Respond to and contain cybersecurity incidents, and identify eradication strategies.
・Facilitate the transformation of the current SOC and Incident Response capabilities.
・Manage adversary indicators of compromise, tracking, and monitoring of adversary tactics, techniques, and procedures, motivations, goals and strategic objectives.
・Manage incident response activities, including incident triage, containment, eradication, and recovery to minimize the impact of security incidents on the organisation.
・Lead cyber threat intelligence collaboration internally and externally.
・Create industry standard group level ‘Follow the Sun’ fusion center of CTI and SOC professionals to provide a center for the monitoring, analysis and reporting of cyber events and activities to identify trends and potential risks and leading proactive measures to mitigate.
・Ensures all CTD activities are compliance with all relevant regulations and standards.
・Collaborate with cross-functional teams to assess security posture and recommend improvements to enhance threat detection and response capabilities.
・Provides regular cyber threat briefings about adversarial threat modelling, advanced analytics, and other leading-edge technologies to proactively inform multiple audiences of potential threats.
・Understand how to convert highly technical language to business-centric language including being able to clearly explain the impact of threats on the business value chains.
・Stay informed about industry trends and best practices in CTD, and recommend improvements to enhance the division’s performance.
・Provide clear guidance to key stakeholders (e.g., IT, business, legal, compliance) on how to meet specific security requirements that will enhance all CTD activities.
・Establish relationships with law enforcement and other cyber threat defense agencies in Japan but also in other countries where Our company has large operations centers.
・Develop and maintain security policies, procedures, and guidelines to ensure compliance with regulatory requirements and industry standards.

Responsibilities：

・Develop security reporting/metrics for multiple audiences including executive management and board reporting. Ensure that the relevant metrics are fed into various committees and the Chief Control Office framework and the 2nd Line of Defense.
・Responsible for the implementation of the BISTRA (Business-centric Security Threat & Risk Assessment) Methodology across the most critical value chains of the firm.
・Select, deploy, and manage the Security GRC Portal management to manage the risk and control framework as well as the BISTRA methodology.
・Track and manage all audit, regulatory examinations, client requests, law enforcement requests, and external certifications.
・Manage the risk treatments of security issues and risks identified such as risk acceptances, risk deferments, etc. on behalf of the program and project teams and other stakeholders. Track and monitor the risk treatments to closure.
・Develop and manage all security documentation for the Global CISO team including a library of threats, risks, controls, mitigating practices, capabilities, functions, tools, and processes.
・Monitor and report on compliance with information security and cybersecurity regulations and standards.
・Collaborate with internal stakeholders to ensure alignment of information security risk and controls governance with business objectives.
・Stay current on security risk and controls trends, threats, and regulatory requirements to proactively address emerging issues.
・Responsible for formalising the response to information security incidents, such as data breaches or cyber compromises internally and to regional regulators in accordance with notification rules
・Develop and manage the third-party security risk management team including security assessments and onsite security audits for third parties.

会社全体の成長戦略の実現に向けて、生成AIを含むAIや各種データ（顧客データ・契約データ・お客様対応履歴・行動履歴等の幅広いデータ）の利活用を進める攻めのガバナンス体制（方針、ルール策定からモニタリング機能まで）の企画、実行、推進を担って頂きます。

●具体的な業務
1.AIやデータの活用推進を企図したAIガバナンス/データガバナンス戦略の企画立案・実施
2.重要度に応じたAIガバナンス/データガバナンス関連の取扱規程・ルールの整理、管理・運用（周知、教育、徹底）
3.AIガバナンス/データガバナンスに由来するリスクの管理に関する社内・グループ横断的なプロジェクトの推進
4.社内のビジネス部門・システム部門・データ分析部門等と連携したプロジェクトマネジメント
5.AIガバナンス/データガバナンスの国内外動向等に基づく改善提案と推進
6.事業部門からの相談対応
7.プロジェクト全体のステータス管理（会議体報告等）
8.サービス・リリース時におけるサービス提供主体へのレピュテーションリスク等影響評価
9.外部専門家との連携、社内関係部会議やアドバイザリーボードの事務局

ROLE DESCRIPTION AND PURPOSE
Responsible for advising on and controlling Compliance activities within Our Group Asset Management, in
accordance with local regulatory requirements, Our Group Asset Management and Group Compliance standards. As “Naibu Kanri Sekininsya” / “Internal
Administrator”, exercise an oversight Sales units conducts to ensure a full compliance with the laws and regulations governing Type 1 Type
I Financial Instruments Business.
Expected to develop and maintain a robust Compliance culture and organisation at management and operational levels of the business.
Ensures that policies and procedures issued by Group and AM Global Compliance functions are implemented locally so that
Compliance associated operational risks are correctly identified and addressed, in particular through relevant controls and compliance
monitoring plans.
Managing the Compliance support staff.

【具体的な業務内容】
＜法務＞
　・知的財産に掛かる業務
　・事業に関わる法律的な検証
　・法人取引に関わる契約書の確認
　・訴訟、仲裁等の法的紛争の対応
　・行政対応
　・その他、法律に関わる業務全般

＜総務＞
　・株主総会・議決権対応
　・取締役会、その他傘下の委員会運営
　・株式事務に係る事項
　・備品・消耗品管理、保安・防災、施設管理
　・その他、総務関連業務

＜リスク統括＞
　・全社的リスク評価の実施
　・リスク／コンプライアンス委員会事務局
　・事業継続計画（BCP）の策定・推進
　・インサイダー取引・反社勢力・マネーロンダリング・公正競争阻害
　・その他、リスクに関わる業務

Responsibilities:
デジタル技術を活用した新規事業や、サステナビリティ投資等の先端的な金融ビジネス、その他の複雑な金融取引に関する関連法令の調査・分析、国内及びクロスボーダーのM&A案件における法的課題の検討、ドキュメンテーション及び外部事務所との連携のサポート、法人顧客及びベンダーとの契約の作成及びレビュー、国内外の個人情報や顧客情報の取扱いに関連する法的課題の検討（クロスボーダーのデータ移転を含む。）その他クロスボーダー連携並びに、著作権をはじめとする知的財産権に関する相談等のうち、ご本人の適性等を踏まえて担当業務を決めさせていただきます。

法務部及び取引法務部が属するリーガル・コンプライアンス・コンダクト部門内の連携のほか、経営戦略、インベストメント・マネジメント、グローバル・マーケッツやインベストメント・バンキング、購買戦略、IT、ファイナンスといった幅広い部門の国内外の関係者と協働しながら業務を行っていただきます。

Develop policies and rules related to compliance matters of the new REIT, implement them, and
communicate / report / negotiate with relevant regulatory bodies as required
新規REITのコンプライアンスに関する方針やルールを策定し、実施し、
必要に応じて関連規制機関と連絡/報告/交渉する

Chairman of a Compliance Committee of the new REIT that examines compliance related issues, including but not limited to any transactions / contracts which may face conflicts of interests with related parties, and other important issues of own company, and exercise the power of veto if required

新設REITのコンプライアンスに関する事項を検討するコンプライアンス委員会の委員長、
利益相反に直面する可能性のある取引/契約を含みますが、これに限定されません。関係者およびその他自社の重要事項に同意し、必要に応じて拒否権を行使することができます。

Develop and revise a compliance manual and a compliance program related to the new REIT to ensure compliance with laws and regulations by closely working with CO, propose to Compliance Committee and then to the board of our company to seek approvals, and implement them

・新規REITに係るコンプライアンス・マニュアル及びコンプライアンス・プログラムを策定・改訂し、運用会社と緊密に連携して法令遵守を徹底し、
コンプライアンス委員会を経て当社取締役会に諮って承認を求め、実施

Report status of compliance with laws and regulations of the new REIT to Compliance Committee
法令遵守状況をコンプライアンス委員会に報告

Develop and revise a plan and implement internal audit of the new REIT by closely working with
新規REITの計画策定・修正および内部監査の実施

Request a report of compliance related matters of the new REIT and make a recommendation as required
新規REITのコンプライアンス関連事項の報告、勧告

Educate and update employees of NRPO and board of directors of own company about law, regulations,
market rules, internal rules, and organizational systems / procedures to ensure compliance with laws and regulations by closely working with co
従業員および自社の取締役会に対して、法律、規制、
市場ルール、社内ルール、コンプライアンスを確保するための組織体制・手順
運用会社と緊密に連携して法規制を遵守

Develop, revise, and implement required policies / rules to avoid insider trading and manage related information by closely working with CO
運用会社と緊密に連携してインサイダー取引を回避し、関連情報を管理するために必要なポリシー/ルールを策定、改訂、実施

Lead own company to respond and manage an accident and general complaint / claim related to the new REIT
クレーム対応・管理

Lead own company in screening advertisements of the new REIT
広告審査
Accept and manage whistle blowing appropriately and protect whistle blowers of NRPO
内部告発者の保護
Assist the board of new REIT regarding compliance related matters
理事会の運営

法務コンプライアンスに係る次の業務を行う。（適性に応じて一部を担当することになるため、以下は例示です。）

・新規事業・新規サービスに関する法的リスクの評価・所管部の支援
（法務相談・契約書レビュー・会議体議案点検・社外弁護士関連含む。）
・兼務するホールディングス法務コンプライアンス部としての国内外拠点・グループ会社の法務コンプライアンス態勢構築支援、モニタリング
・グループ全体に影響が生じうる重要な訴訟への対応
・その他法務コンプライアンス業務

グループのコーポレート部門法務 (Office of the General Counsel) にて、ご活躍いただきます。

●Provide advice, in Japanese or English as required, to partners and staff of us regarding legal risks as well as various risks in general in various aspects of business transactions, especially (but not limited to) consulting/advisory services, that the partners and staff provide to outside clients of us.

●Working with other members of OGC, participate in the drafting and review of various policies and procedures

●Review, draft and negotiate all types of contracts in English used for consulting/advisory services in Japan, and associated non-disclosure agreements, subcontracting agreements and alliance contracts

●Coordinate with various stakeholders with respect to seal and execution procedures following completion of contract negotiations

●General experience in dealing with other types of contracts and advising clients in legal settings other than those described above

●Coordinate with risk management groups of us (other than OGC) with respect to dealing with risk management issues and incidents faced by us.

●Coordinate with the Global Office of the General Counsel of the our network, as well as the Offices of the General Counsel of other territories’ our firms, with respect to various global and cross-border projects and initiatives that are to be implemented in Japan

●Assist with various internal projects required for OGC to run smoothly

●Take responsibility for other tasks as requested by the General Counsel or other members of OGC

日本（東京）を本社とするグローバル保険グループにおいて、法務コンプライアンスに係る次の業務を行う。（適性に応じて一部を担当することになるため、以下は例示です。）
国内外でのM&Aの対応（契約書作成・点検、法務DD、買収ストラクチャー検討、相手方との交渉等）
国内外拠点・グループ会社の法務コンプライアンス態勢構築支援、モニタリング
新規事業・新規サービスに関する法的リスクの評価・所管部の支援
その他法務コンプライアンス業務

業務内容】
1.ディールにおける論点相談
2.取引関連契約書レビュー
3.社内向け資料作成
4.業界の法的リスク分析・当局対応
5.案件同行デュ―ディリジェンスにおけるチームサポート

1.M&Aディールに関して生じる法的問題についてアドバイス（事業承継・中小規
模M&A・仲介という立場から）
2.基本合意書、株式譲渡契約、事業譲渡契約等の作成
3.現場営業向け説明資料、ノウハウ共有資料等の作成
4.M&A仲介業者に関するガイドライン・登録制度が発表されるなど、近年規制傾
向が高まっており、その対応
5.現場営業に同行し、契約書内容についての説明や、ディールに関する法的問題
について直接説明する