Key Responsibilities

• Lead security compliance enablement aligned with ISO 27001 and the NIST Cybersecurity Framework, including risk assessments, internal audits, policy management, vendor security reviews, and security awareness programs. (As the company already possesses ISO, the defined compliances to be enabled across the organization. NIST is in working)
• Deep knowledge in Microsoft 365 environments, including Microsoft Entra ID, Conditional Access, MFA, Microsoft Defender, Purview, DLP, email security, and audit monitoring., endpoint security solutions, EDR platforms, device compliance, encryption, and vulnerability remediation.
• Responsible for audit queries from our clients and alignment with the product teams towards maintaining compliance and audit drives. Also, leading IPO related security part and enabling it over country specific regularizations.
• Conduct vulnerability assessments, coordinate penetration testing, manage patching, and track remediation activities.
• Implement and maintain network security controls, including firewalls, VPNs, IDS/IPS, DNS security, and network segmentation.
• Manage Identity & Access Management (IAM), including RBAC, privileged access management, user lifecycle management, and periodic access reviews.
• Perform security architecture reviews, application security assessments, cloud security reviews, secure configuration management, and support DevSecOps initiatives.
• Maintain security documentation, risk registers, and ensure continuous improvement of the organization's security posture.
• 
  

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Fluent in Japanese
• Preferred Certifications
  • ISO 27001 Lead Implementer / Lead Auditor
  • Microsoft Certified: Cybersecurity Architect Expert / Security Administrator
  • CompTIA Security+
  • Certified Information Systems Security Professional (CISSP)
  • Certified Ethical Hacker (CEH)
  • SC-200 / SC-300 / AZ-500 (Preferred)