ICT Security Strategy & Planning Specialist

Role Overview

• Drive enterprise-wide and group security initiatives, maintaining and strengthening them through PDCA cycles
• Develop and deploy information security policies/standards, plan and execute security strategies
• Design and implement employee training programs (planning, execution, and effectiveness analysis)
• Respond to security consultations from business units, and coordinate with key departments to drive cross- security governance and initiatives.

Required Skills & Experience

• Japanese (business) and English (business) to communicate with HQ in Japan
• 5+ years of experience in information security planning and strategy development
• Experience with ISMS (Information Security Management System) and/or ISO 27001certification acquisition and operations
• Experience conducting gap analysis using NIST CSF and/or CIS Controls
• Hands-on experience with security risk assessment, management, and incident response
• Experience handling information security regulations (e.g., Personal Information Protection Act, GDPR)
• Experience leading cross-functional projects
• Experience planning and conducting security awareness and training programs for executives and operational staff
• Basic knowledge and operational experience with IT infrastructure (network, cloud, servers, etc.)
• Information security certifications (CISSP, CISM, Registered Information Security Specialist, etc.)

Preferred Skills & Experience

• Experience developing internal policies and guidelines
• 3+ years of system operation and deployment experience
• 3+ years of information security-related work experience

Soft Skills

• Ability to explain and persuade based on the audience's perspective and knowledge level
• Proactive attitude and self-starter mindset
• Strong collaboration skills with ability to coordinate and build consensus across departments