В Okta это четко очерченная senior-роль в security compliance с заметной ответственностью за ISMAP и международные стандарты; основные ограничения - узкая специализация и обязательное владение английским и японским.
Кликните для подробной информации
Узкая специализацияПонятная зона ответственностиСильная компанияДва языка обязательны
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Staff Info Security Engineer (Security Compliance/ISMAP): Strengthening Okta’s cloud security compliance program through control implementation, assessments, testing, documentation, and audit support with an accent on ISMAP, SOC 2, ISO 27001, and Japanese cybersecurity requirements. Focus on interpreting multiple frameworks, identifying control gaps, leading remediation, and coordinating compliance initiatives across process owners and auditors.
Location: Hybrid in Tokyo, Japan
Company
Okta provides identity and access management infrastructure designed to help organizations securely adopt cloud and AI technologies.
What you will do
Participate in security compliance assessments of Okta’s computing environment, focusing on security controls.
Facilitate Okta’s ISMAP compliance assessment and lead private-sector compliance initiatives.
Interpret requirements across multiple compliance frameworks and maintain the common controls framework.
Schedule compliance walkthroughs, coordinate communications, and report on key compliance projects through metrics.
Test controls, analyze gaps, assess system and application changes, and develop remediation recommendations.
Work with process and control owners to explain audit results, prioritize remediation, and develop security documentation, policies, system security plans, and risk assessment procedures.
Requirements
5–7+ years of experience in information technology or a similar field, preferably in a Security Governance, Risk, or Compliance role.
Comprehensive understanding of IT security practices and the Governance, Risk, and Compliance lifecycle.
Fluent English and Japanese.
Experience at an ISMAP-compliant organization or performing ISMAP assessments.
Familiarity with Japanese cybersecurity laws and regulations.
Knowledge of security frameworks and best practices including NIST, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC 2 Trust Principles and Criteria.
Understanding of software development lifecycle and operations methodologies.
Strong analytical, problem-solving, oral, written, and presentation skills.
Ability to work independently and collaboratively; bachelor’s degree or higher in Computer Science, Management Information Systems, Accounting, or equivalent experience.
Culture & Benefits
Hybrid work arrangement with an immersive, in-person onboarding experience.
Well-being support, social-impact initiatives, and talent-development and community programs.
Equal-opportunity employment and reasonable accommodation support throughout the application, interview, and onboarding process.
Global community spanning more than 20 offices worldwide.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →