BISO & Cyber Security Transformation Lead

Leadership

1. 1Provide the security leadership across Japan deploying our global information security program and influencing IT and business executives whilst ensuring the local regulatory and business requirements are met.
2. 2Represent the Group CISO function as the Japan country Information Security leader.
3. 3Must be able to operate as the local subject matter expert & Leader conveying GIS and RISO expectations locally.

Technical / Assessment

1. 1Regularly assess and evaluate local country risk & control position against the KPI’s and information security risk management framework.
2. 2Support Japan regulatory assessment activities in relation to RISO & GIS domains, ensure partnership, visibility, and engagement to regional CRA, and global security GRC leadership.
3. 3Serve as a comprehensive specialist in the field of cyber security identifying and driving mitigation of technical cyber risks across Japan operations.

RISO Transformation & Change

1. 1Drive and support Cyber transformation and change activities relating to RISO/GIS program, and local adoption of Chubb security processes, policy, and standards.
2. 2Support GIS and RISO portfolio delivery into Japan with local oversight and escalation to ensure that GIS objectives, transformation targets are effectively (and consistently) rolled locally.
3. 3Ability to build plans and oversee local improvement and transformation aligning to Chubb’s GIS program and RISO functional objectives.

Reporting and Governance

1. 1Provide regular country reporting on information security Key Performance Indicators (KPI), issues and risks to the RISO and CISO, CIO any concerned Japan business leaders and regional / global senior management requiring Far East Cyber Reporting.
2. 2Establish monthly cyber coverage meetings with Japan CIO and COOs.
3. 3Build accurate inventory / registry of Japan security issues and exceptions, ensuring local disclosure and identification of security derogations.
4. 4Monitor Third-Party Cyber Risk Management risks and support local management escalation discussions where necessary.

Communication & Stakeholders

1. 1Build and effective relationship, partnering and supporting the Far East CIO, and other local Japan Leaders on Information Security matters.
2. 2Identify and engage with key business contacts and stakeholders to raise awareness of the security threats to CHUBB and to ensure adequate coverage for business’ information security program.
3. 3Attend Regional InfoSec Leadership and Global Team meetings providing local insight on Japan specific issues, challenges, and status.

Cyber Incident response oversight

1. 1Oversee, support and report on Far East (Japan) information security incidents in collaboration with Global Security Operations and the Privacy function, and the regional Information Security Incident Management team.

Security training & Awareness

1. 1Plan, support security awareness and training activities within Japan driving risk culture changes, improvement of security behaviours.

応募資格（必須）

• Experience leading Japan country information security requirements within a global FI, responsible for a breadth of security services.
• Hands on practical cyber acumen across technical security domains.
• Strong general security knowledge across all aspects of the NIST Cybersecurity Framework.
• Familiarity with Japanese regulatory standards and activity around Information Security (Japan FSA), covering data usage and protection, and technical specifications.
• Demonstrated expertise in Incident Response and Incident Management.
• Communication skills including the ability to develop and provide effective presentations to various audiences, including non-technical resources.
• Good understanding of cloud services and cloud development techniques, as well as cloud security.
• Experience with Data Leakage prevention and protection (DLP) control design and process alignment within corporate structures.
• Cyber transformation, project, and program planning experience for security control uplift, implementation, and improvement.
• Strong organizational, analytical and customer service skills.
• Japanese & English bilingual key requirement. Ability to work and partner with Japan stakeholders in Japanese, and regional and global stakeholders in English is a must have.
• Ability to work effectively in a team/matrixed environment.
• Effectively communicate risks and issues to various levels of the business and IT leadership.
• Ability to work onsite regularly to ensure management of key stakeholder relationships.
• Ability to travel where required (up to 20%).

歓迎する経験

• Experience working in an agile work style, Secure Dev Ops, Security in Software Security Delivery preferred.

待遇・福利厚生

• 国民の祝日
• 夏季休暇
• 年末年始休暇
• 年次有給休暇
• 社会保険完備
• 財形貯蓄制度

求めるスキル・経験