IT（PM・SE） - セキュリティエンジニア

■About the department
The IT Security Lead is responsible for conducting evaluations of IT programs or its individual components to determine compliance with published policies and standards. Furthermore, the coordination of several key cybersecurity support areas, including e.g., Policy, Process and Standards Management, Enterprise Governance, Risk Management, and Compliance Support, Security Compliance, Vulnerability, Risk and Vendor Management Services, etc. is the area of responsibility for this role

■Job descirption
・Responsible for implementing safeguards and compensating controls to maintain resilient IT infrastructure and applications within both enterprise IT and manufacturing environments.
・Work with the service provider(S) and business stakeholders to address vulnerability identification and remediation efforts and ensure compliance with patching requirements
・Protects all assets related to Confidentiality, Integrity & Availability
・Reviews and updates Information Security requirements analysis and specifications
・Supports and contributes to global security projects
・;Review & consult HQ Security related projects and changes
・Contributes to global security policies, processes and standards
・Review of privileged access rights
・Reviewing information security events and weaknesses within IT-Security dashboard and ensuring chosen KPI´s
・Response to information security incidents and collection of evidence
・Maintain risk register (prioritized list of risks and respective countermeasures) in the region and consolidate the overview with the global risk register
・Technical review of applications after operating platform changes
・Provides System security testing and technical analysis of new IT products in terms of IT-Security
・Ensuring IT quality, IT compliance and IT security - leading participation in internal and external audit processes (e.g., J-Sox, ISO) and driving continuous quality improvements
・Regular assessments of threat potential and risks with the asset owner
・Consult to and support the Global Head of IT Security and Global IT Security Team
・Supporting internal IT-Audits due to IT-Security
・Strongly collaborates with product managers and IT operations to prioritize security requirements and align on security implementation plans
・Develop and enhance employee’s security awareness
・Oversight of managed security provider
・Support and collaborate with Global Privacy

■休日：完全週休二日制, 土, 日, 祝日, 年末年始

■Must to have
・Bachelor’s degree in computer science, business studies, comparable qualification, or relevant work experience
・Minimum 5 years of relevant work experience
・Deep understanding of IT security topics
・Operational experience in IT infrastructure security
・Understanding of Business Continuity Management (BCM) and Risk Management
・Excellent oral and written communication skills in local language and English


■Nice to have
・ Relevant industry certification CISM (Certified Information Security Manager), CISSP (Certified Information Systems Security Professional), and CISA (Certified Information Systems Auditor) is of advantage
・Past experience with implementing IoT Security is a plus
・Past experience with implementing Cloud Security is a plus (Azure, AWS)
・Past experience with implementing common security frameworks (NIST, ISO27001) is a plus

■職種未経験者：不可