職種・勤務地・キーワードで探す
条件を変える
東京都のセキュリティエンジニアの求人863件応募資格・募集要項・仕事内容を見る
Information Security GRC Specialist (Manager Potential)
- 給与
- 記載なし
- 勤務地
- 東京都
- 休日
- 記載なし
- 雇用形態
- 記載なし
どんな仕事かAIによる生成
The Information Security GRC Specialist supports implementation and continuous improvement of the DTRR operating model, providing practical governance, risk, and compliance support across its pillars. The role provides primary cross-functional support to DTAM and DTEN, including assurance, governance processes, enablement, and coordination across relevant stakeholders.
この求人に応募
応募資格
必須
- Bachelor's degree in Information Technology, Law, Finance, Cybersecurity, Engineering, or a related field. An advanced degree (Master's or higher) in a relevant discipline, such as an MBA or Cybersecurity, is highly preferred.
- Relevant professional certifications such as CISA, CISM, CRISC, CISSP, CGEIT, ISO/IEC 27001, ISO/IEC 42001, NIST CSF, or other qualifications demonstrating expertise across GRC, information security, risk, compliance, or Digital Trust domains are good to have.
- 7-12 years of progressive experience in Governance, Risk Management, Information Security, and/or Compliance roles, with experience supporting significant programs, developing the capabilities of others, or assuming responsibility for key program components.
- Proven experience working within or alongside teams of GRC professionals, including experience coaching, mentoring, supporting development, and improving team or stakeholder capability.
- Broad understanding across multiple GRC domains, including security risk management, compliance management, policy and standards management, third-party risk, business continuity, information security governance, assurance, and control management.
- Strong experience with GRC technology platforms and governance automation; experience with leading GRC, compliance automation, workflow, or control-management platforms is a significant advantage.
- Strong critical thinking, leadership, problem-solving, and influencing skills, with the ability to operate effectively across organizational and functional boundaries.
- Excellent verbal and written communication, presentation, facilitation, and interpersonal skills, with the ability to translate complex technical, risk, security, and regulatory information for diverse audiences, including non-technical stakeholders and executives.
- Demonstrated ability to manage multiple priorities, projects, dependencies, and stakeholders within a fast-paced and evolving environment.
- Ability to work as a senior individual contributor, provide guidance and coaching to others, and influence outcomes without requiring direct management authority.
- English (Overall - 3 - Advanced)
- Japanese (Overall - 4 - Fluent)
募集要項最終確認 11/13
- 職種
- セキュリティエンジニア
- 雇用形態
- 記載なし
- 給与
- 記載なし
- 勤務地
- Tokyo, Japan
- 働き方
- 記載なし
- 経験年数
- 7年以上
- 学歴
- 大学卒業以上
- 掲載日
- 2026/09/05 13:10(70日前)
- 最終確認
- 2026/11/13 17:43(1日前)
仕事内容
Job Duties
- The Information Security GRC Specialist is an experienced individual contributor and cross-pillar enabling role. The role does not replace the accountability of DTRR Pillar Leads and is not accountable for the strategic ownership of DTAM, DTEN, DTDPG, DTRC, DTARG, or DTRIM.
- _Operating flow:_ Requirements -> Governance -> Controls & Processes -> Business Practices -> Adoption & Evidence -> Continuous Improvement
- The role serves as an important connective capability between DTAM and DTEN, while providing practical GRC support across the wider DTRR operating model.
- Work across the DTRR pillars to support the implementation and continuous improvement of the Digital Trust & Regulatory Resilience operating model.
- Provide hands-on governance, risk, and compliance support to DTRR Pillar Leads, helping translate strategic objectives into practical processes, controls, standards, procedures, and operational guidance.
- Provide primary cross-functional support to DTAM - Digital Trust Assurance Model, including control framework development, control mapping, evidence requirements, assessment processes, remediation tracking, control maturity, and assurance activities.
- Support the development, review, maintenance, and continuous improvement of information security policies, standards, procedures, operational manuals, and governance processes.
- Support policy and standards lifecycle management, including periodic reviews, stakeholder consultation, change impact assessment, approval preparation, communication, and implementation tracking.
- Support the development and adoption of governance automation capabilities, including workflow automation and AI-assisted policy, standards, control, and evidence review processes.
- Assist in translating regulatory, security, data, privacy, AI, and business requirements into practical controls and governance processes.
- Support the maintenance and evolution of the DTRR control framework, including mapping requirements from ISO/IEC 27001, ISO/IEC 27002, ISMS, ISMAP, and other applicable standards and regulatory frameworks.
- Support ISMS and ISMAP readiness activities, including control reviews, evidence preparation, gap identification, remediation tracking, internal assessments, and audit coordination.
- Support the DTRR exception management process, including intake, assessment, documentation, compensating controls, approval routing, expiration monitoring, remediation tracking, and closure.
- Support internal and external assurance activities by coordinating evidence, control-owner responses, remediation actions, and audit readiness across relevant stakeholders.
- Provide primary cross-functional support to DTEN - Digital Trust Enablement Network, helping translate governance requirements into practical guidance, communications, awareness, training, and business enablement activities.
- Support and coach Trust Enablement Representatives and other business stakeholders in understanding their responsibilities for security, data, privacy, AI, risk, and regulatory governance.
- Help develop role-based guidance and enablement materials for control owners, business owners, data owners, data stewards, technical custodians, product owners, and other governance stakeholders.
- Support security and Digital Trust awareness initiatives that strengthen organizational understanding of security, data protection, responsible AI, regulatory obligations, and risk accountability.
- Identify recurring areas of misunderstanding, control failure, process friction, or poor adoption and work with DTAM, DTEN, and the relevant Pillar Lead to improve the underlying governance process.
- Support DTDPG - Digital Trust Data Product Governance by helping operationalize data governance processes, data classification and handling requirements, ownership and stewardship responsibilities, HPDU governance, cloud data governance, and HLD-related governance requirements.
- Support DTRC - Digital Trust Regulatory Compliance by helping translate regulatory requirements into controls, policies, standards, processes, evidence requirements, and organizational guidance.
- Support DTARG - Digital Trust AI & Responsible Governance through AI policy and standards development, AI governance processes, risk assessment support, ISO/IEC 42001 alignment, responsible AI awareness, and integration of AI governance requirements into DTAM and DTEN.
- Support DTRIM - Digital Trust Risk Intelligence Management by contributing consistent control, assurance, exception, adoption, and governance data for risk intelligence, KPI/KRI measurement, and management reporting.
- Support development and improvement of internal DTRR processes, ensuring activities are clearly documented, repeatable, scalable, and aligned with defined roles and decision rights.
- Facilitate cross-pillar working sessions to identify dependencies, clarify responsibilities, resolve governance gaps, and coordinate activities requiring multiple DTRR capabilities.
- Support Security High-Level Design and other governance review processes where DTRR involvement is required, helping identify applicable data, privacy, security, AI, regulatory, and control requirements.
- Support incident-response governance where required, including coordination of governance actions, control impact reviews, remediation tracking, lessons learned, and translation of incident findings into policy, control, process, or awareness improvements.
- Support governance metrics and reporting by helping define, collect, validate, and improve KPIs and KRIs relating to control effectiveness, exceptions, assurance, adoption, policy health, remediation, and governance maturity.
- Identify opportunities to simplify, standardize, and automate GRC activities while maintaining appropriate governance, accountability, evidence, and human oversight.
- Maintain awareness of emerging information security, regulatory, AI, data protection, risk, and governance practices and help assess their relevance to DTRR.
- Build collaborative relationships across Security, Technology, Business Units, Privacy, Legal, Compliance, Internal Audit, Cloud, Data, AI, and other relevant functions to support consistent adoption of DTRR requirements.
- Promote a culture of practical governance, shared accountability, continuous improvement, and Digital Trust across the organization.
この求人は、楽天モバイル株式会社の採用ページの内容をAIが読み取って整理したものです。応募の前に採用ページの原文を確かめてください。データの集め方企業サイト
同じ会社の求人46件
- エンジニアオープンコース
- ネットワークエンジニアコース
- HR Representative - Organization & Talent Development Group, Human Resources Department
- Strategist (RMI Strategy & Data Dep)
- 政府助成金プロジェクト:テクニカルプロジェクトマネージャー (RMIイノベーションプログラム開発事業部)
- Customer Support SME
職種と勤務地が似ている求人東京都のセキュリティエンジニア 863件
- 生損保/基盤システム(パブリッククラウド、端末、開発環境)向けセキュリティアーキテクト
- セキュリティエンジニア
- セキュリティコンサルタント兼セキュリティソリューションエンジニアリーダー
- OTセキュリティエンジニア(プラント制御システム/SCADA・DCS)
- サイバーセキュリティマネージャー
- サイバーセキュリティ セキュリティ実務対応 (インシデント・脆弱性対応) リード
募集元の採用ページから応募できます
応募は楽天モバイル株式会社の採用ページで受け付けています。このページは採用ページの掲載内容をもとに構成しているため、最新の応募条件は募集元でご確認ください。
この求人と近い条件で探す数字はリンク先ページの掲載件数
応募資格の語から探す
この職種で探す
- セキュリティエンジニア1,195
- 東京都のセキュリティエンジニア863
- テック16,465
- インフラエンジニア1,089
- クラウドエンジニア680
この勤務地で探す
働き方・年収で探す
この職種を募集する企業
- 楽天モバイル株式会社46
- 日本電気株式会社364
- ヤマハ株式会社42
- WOTA株式会社32
- 株式会社野村総合研究所183