1 day ago
Tokyo, JapanMid Level
Responsibilities
- Develop and implement enterprise-wide security strategy in collaboration with the CISO and security team.
- Assess and analyze the security level and maturity of networks and systems.
- Create security policies, rules, and governance to mitigate enterprise and business-unit risks.
- Design and implement security controls in AWS, GCP, or Azure environments, including IAM, network security, and infrastructure-as-code implementations.
- Implement and promote DevSecOps by integrating vulnerability scanning and other security tools into CI/CD pipelines.
- Monitor and analyze security events and lead incident response from initial response through resolution.
- Conduct security assessments, evaluate risks, and create risk mitigation plans.
- Collaborate and negotiate with global technical teams in English.
Requirements
- At least 3 years of practical experience in IT infrastructure and/or security-related fields.
- Basic knowledge of IT infrastructure, including networking, servers, and cloud environments.
- Practical experience in security operations, design, assessments, or related work.
- Experience creating security policies and building company-wide or business-unit security governance.
- Experience with cloud security configurations, IAM design, and network security implementation in AWS, GCP, or Azure.
- Experience implementing DevSecOps and integrating security tools into CI/CD pipelines.
- Practical CSIRT or SOC incident-response experience, including monitoring, analysis, and leadership through incident resolution in large-scale environments.
- Experience evaluating security risks and planning risk mitigation.
- Business-level English proficiency for technical discussions, coordination, and negotiation with global teams.
- Preferred experience in telecommunications carriers or large web services, application development or infrastructure engineering, security automation using Python or Go, and governance based on ISO 27001 or NIST CSF.
- Preferred certifications include CISSP, CISM, CISA, AWS Certified Security – Specialty, CompTIA Security+, CySA+, PMI, and relevant Japanese information-security certifications.
About Rakuten
Rakuten Group builds e-commerce marketplaces, financial services (credit cards, payments, banking, securities), and digital/communications offerings for consumers and merchants worldwide. It monetizes through transaction fees, financial services income, advertising, and mobile subscriptions; flagship businesses include Rakuten Ichiba, Rakuten Card, and Rakuten Mobile. Founded in 1997 and headquartered in Setagaya, Tokyo, the company is publicly listed on the Tokyo Stock Exchange and operates across many countries and regions.