About SmartNews
SmartNews is a leading global information and news discovery company dedicated to delivering quality information to the people who need it. Thanks to our unique machine-learning technology and relationships with more than 3,000 global publisher partners, we provide news that matters to millions of users.
Founded in 2012 in Tokyo, SmartNews also has offices in San Francisco, Palo Alto, New York, and Singapore. If you are someone who shares our vision and feels passionately about our mission, we encourage you to apply!
Roles and Responsibilities:
Responsible for reducing internal security risks and improving external credibility by continuously developing and operating company-wide security and IT governance rules.
- Security Governance Framework: Develop, implement, and maintain a comprehensive security governance framework (policies and procedures) to ensure compliance with industry standards and regulations.
- Risk Management: Establish mechanisms to identify, assess, and mitigate security risks across the organization, with ongoing monitoring and feedback.
- Compliance: Regular audits and assessments to ensure compliance with standards such as ISO 27001.
- Audit Readiness: Respond to internal and external audits to maintain effectiveness and compliance of security measures.
- Training and Awareness: Develop security training programs for employees and promote security awareness and best practices throughout your organization.
Requirements
Required Experience:
- 5+ years of experience in security/compliance field
- Experience in responding to external security certifications and audits such as ISMS and SOC2
- Technical knowledge: Deep understanding of security governance frameworks and standards such as ISO 27001 and NIST.
- Risk management skills: Ability to effectively identify, assess, and mitigate security risks; experience with risk assessments and audits.
- Project management: Project management and driving force that leads the project from conception to completion.
- Communication: Excellent written and verbal communication skills to create clear policies and provide security training to non-technical employees.
- Japanese proficiency (Business level or above)
- English proficiency (Business level or above)
Nice to have experience:
- Certifications such as CISSP, CISM, or CISA
- Experience in introducing and developing security-related systems
- Human resources management experience
Working condition
Click here or visit our career site for more details.
Benefits
- Annual health check covered by the company
- Visa sponsorship and overseas relocation support available for eligible candidates
Click here or visit our career site for more details about our benefits.
