Description

Responsibilities

• Ensure delivery of information security services is in compliance with contract terms and applicable standards and regulatory requirements (e.g., PCI, SOX)
• Collaborate on the definition and implementation of information security policies, strategies, procedures, and configurations to ensure confidentiality, integrity, and availability of the client's environment and data
• Participate in the strategic design process to translate security and business requirements into processes and systems
• Evaluate new and emerging security products and technologies and make recommendations to leadership regarding impact on organizational security posture
• Identify, review, and recommend information security improvements aligned with business goals and objectives
• Manage and drive remediation efforts related to information security, including those arising from incidents, penetration tests, vulnerability scans, internal and external audits, and assessments
• Identify information security weaknesses and gaps in current operations and work to bring security operations to required standards
• Participate in and represent IT Security in delivery and operational meetings
• Conduct information security operational review meetings with key stakeholders, covering security status and performance metrics
• Review service management reports to ensure information security-related tickets (incidents, problems, requests, changes) are being acknowledged and worked, and that Service Level Agreements are being met; provide direction on remediation and ensure completion

Qualifications

• Required
  • 12+ years of IT Security experience
  • Bilingual Japanese and English fluency
• Preferred
  • Strong knowledge of standards and regulations impacting information security (e.g., NIST, ISO, PCI)
  • Experience with information security internal and external audits, contract compliance, and quality initiatives
  • Significant experience identifying and utilizing a global risk-based management model
  • At least one of the following certifications: CISSP, CISM, SSCP, CEH, or CSSLP
  • Undergraduate or graduate degree
  • Security or consulting industry experience working in a customer-facing role with senior-level customer security relationship management experience
  • Familiarity with information security technologies and issues on multiple platforms
  • Experience working with network perimeter security technologies such as firewalls, intrusion detection and prevention systems, and content filtering technologies
  • Working knowledge of security monitoring technologies and processes, such as monitoring architectures, log aggregation, SOC and SIEM capabilities, and incident response
  • Significant experience in application and integration of globally accepted security standards
  • Advanced knowledge of information technology and infrastructure configurations that protect systems from unauthorized access and software invasion

Key Skills

Education

Bachelor's degree