Security and data protection Officer - Korea at ARC'TERYX

Tokyo, , Japan -

Full Time

Start Date

Immediate

Expiry Date

04 Oct, 26

Salary

0.0

Posted On

06 Jul, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cybersecurity, IT Risk Management, Information Security Leadership, ISMS, Regulatory Compliance, Incident Response, Security Governance, Access Control, Stakeholder Management, Executive Communication, Cross-border Data Risk, Security-by-Design, Risk Assessment, Audit Management, Retail Security, APAC Governance

Industry

Apparel & Fashion

Description

Your Opportunity at ARC’TERYX As Security and data protection Officer for Arc’teryx Korea, you will be at the forefront of our digital transformation—empowered to build, lead, and innovate with direct support from the Arc’teryx Technology Global Team. This is not just a compliance role: you will be a strategic business partner, trusted advisor to senior leadership, and the driving force behind our security vision in Korea and in future across the APAC region. If you were a Security and data protection Officer now, here are some of the core activities you would be doing - Champion cutting-edge security strategies that protect our customers, employees, and business partners. - Serve as the face of Arc’teryx to Korean regulators and global stakeholders, ensuring our operations set the standard for compliance and resilience. - Lead major technology transformation projects, embedding security into every layer of our business. - Build and inspire a local security team, while collaborating with world-class experts across the globe. - Play a pivotal role in shaping our APAC security governance, with a clear path to regional leadership. If you are passionate about making a difference, thrive in fast-paced environments, and want to leave your mark on a global stage, this is your opportunity to lead, innovate, and grow with Arc’teryx. Here are some of the things you could be working on in the future Regulatory & Compliance Leadership: - Lead ISMS readiness and ongoing regulatory compliance - Act as primary accountable officer for regulatory audits and reporting - Ensure remediation of audit findings within mandated timelines Information security & Risk Management: - Define and implement enterprise information security strategy - Identify and mitigate risks across systems, infrastructure, and retail platforms - Integrate security into system lifecycle including project delivery and change management - Establish cybersecurity metrics, risk indicators, and continuous monitoring capabilities. Incident Response & Government Engagement: - Serve as incident commander for security incidents - Act as primary liaison with Korean regulators - Ensure rapid response aligned with regulatory expectations Security Governance & Access Control: - Define and enforce security policies and governance frameworks - Ensure full visibility, control, and auditability across all Korea data environments Project Security & Transformation Oversight: - Act as security lead for major transformation initiatives (POS, Salesforce, ERP, data platforms) - Ensure security-by-design across architecture, build, and deployment phases - Define security requirements for vendors and system integrators - Conduct security risk assessments prior to project approval and go-live - Working with Arc’teryx Technology Security, provide formal security approval and sign-off for critical projects Business & Technology Alignment: - Embed security into design, build, and deployment of all technology initiatives - Support secure implementation of retail systems, CRM, and cross-border platforms Team & Capability Development: - Build and lead local security team - Manage external security partners and assessment agencies Future APAC Leadership: - Expand role into APAC regional governance - Standardize security frameworks across markets \n \n Are you our next Security and data protection Officer? Mandatory: - Based in South Korea and fluent in Korean - Permanent employee aligned with regulatory requirements - Comfortable communicating with global teams and stakeholders in English - Eligible to serve as the designated Information Security Officer under Korean regulatory requirements Experience: - More than 5 years in cybersecurity, IT risk, or information security leadership - Proven experience with ISMS or leading equivalent regulatory frameworks - Experience in retail or multi-system environments preferred Certifications: -CISSP, CISM, ISO27001 or equivalent preferred -Strong hands-on technical security capability; certifications alone are not sufficient Core Competencies - Strong regulatory and stakeholder management - Executive-level communication skills - Ability to operate under high accountability and regulatory pressure - Strong understanding of cross-border data and system risks Equal Opportunity Arc’teryx is committed to actively creating and fostering a culture of inclusivity where voices are heard, people are seen, and values are respected. We care about the uniqueness of our applicants, employees, and guests, and we do so in a safe space fueled by curiosity and acceptance. Creating an inclusive workplace is connected to our core values, while also having the added benefit of helping make our business better. We believe inclusion helps us to create a healthier, happier workplace, drive creativity and innovation, and reflect the communities where we operate. All applicants, employees, and guests can expect equality of opportunity and fair treatment in alignment with our values. Design your Purpose. Live our Values. DISRUPTIVE EVOLUTION. Design your future through challenge, experimentation, and inspiration. COMMIT. Set and deliver on bold objectives as we collectively raise the bar. LIVE IT. Deepen your connection to nature and live your most purposeful life. LEAVE IT BETTER. Create a better world, together.

Responsibilities

Lead security and data protection strategies for Arc’teryx Korea, serving as the primary liaison for Korean regulators and global stakeholders. Oversee technology transformation projects and establish security governance frameworks to protect customers, employees, and business partners.