Information Security GRC Specialist - Information Security Management Office, Information Security & Privacy Governance Department (ISPD)

Job description

Job Description: Department Overview The Information Security & Privacy Governance Department is a part of the Technology Management Division, which is a common technical division within the Rakuten Group. The Information Security Management Office oversees information security governance within the Rakuten Group, formulates regulations related to information security governance, supports implementation in development and business departments, monitors, and provides employee education/awareness. The Information Security Policy Group is a team under the Group CISO (Chief Information Security Officer) responsible for formulating regulations for the Rakuten Group. The Information Security Specialist in this group is responsible for planning and drafting security policy, formulation strategies, creating specific policies, and managing the formalization process. In the process of policy formulation, the role also involves prior coordination with relevant departments and group companies, as well as providing explanations and guidance to ensure the formalized policies are effectively implemented. This is a critical position at the core of the Group's information security governance, where various security requirements are materialized while considering global standards, industry norms, and technical feasibility. Position: Position Details - Formulation and maintenance of Rakuten Group regulations, as well as Rakuten Group, Inc.'s Information Security Policy and related policies, including those for AI. - Gathering requirements through regular communication with relevant departments and group companies, and executing and managing the formalization process. - Acquiring information on industry trends and regulatory changes related to information security and sharing it with the CISO community. - Preparing reports for the Rakuten Group CIO, CISO, and management meetings, as directed by the Head of the Information Security & Privacy Governance Department. Mandatory Qualifications: - Effective communication skills with CISO community and stakeholders. - Over 5 years of experience in planning or managing the implementation of information security, internal information systems, or internet service-related information systems. - Over 3 years of experience in formulating internal regulations related to information security or IT governance. - Japanese Requirements: Native Level Desired Qualifications: - Possession of certifications such as CISSP (Certified Information Systems Security Professional) or IPA (Registered Security Specialist). - Experience and knowledge related to ISMS ISO/IEC 27001 certification activities. - Experience in building and operating systems on public cloud services. Other Information: Additional information on English Qualification Business Level (TOEIC 800 or above) #corporate #informationsecurity #privacygovernance #technologymanagementdiv