Назад
5 дней назад

Staff Info Security Engineer

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
Japan
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Info Security Engineer (Security Compliance/ISMAP): Strengthening Okta’s cloud security compliance program through control implementation, assessments, testing, documentation, and audit support with an accent on ISMAP, SOC 2, ISO 27001, and Japanese cybersecurity requirements. Focus on interpreting multiple frameworks, identifying control gaps, leading remediation, and coordinating compliance initiatives across process owners and auditors.

Location: Hybrid in Tokyo, Japan

Company

Okta provides identity and access management infrastructure designed to help organizations securely adopt cloud and AI technologies.

What you will do

  • Participate in security compliance assessments of Okta’s computing environment, focusing on security controls.
  • Facilitate Okta’s ISMAP compliance assessment and lead private-sector compliance initiatives.
  • Interpret requirements across multiple compliance frameworks and maintain the common controls framework.
  • Schedule compliance walkthroughs, coordinate communications, and report on key compliance projects through metrics.
  • Test controls, analyze gaps, assess system and application changes, and develop remediation recommendations.
  • Work with process and control owners to explain audit results, prioritize remediation, and develop security documentation, policies, system security plans, and risk assessment procedures.

Requirements

  • 5–7+ years of experience in information technology or a similar field, preferably in a Security Governance, Risk, or Compliance role.
  • Comprehensive understanding of IT security practices and the Governance, Risk, and Compliance lifecycle.
  • Fluent English and Japanese.
  • Experience at an ISMAP-compliant organization or performing ISMAP assessments.
  • Familiarity with Japanese cybersecurity laws and regulations.
  • Knowledge of security frameworks and best practices including NIST, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC 2 Trust Principles and Criteria.
  • Understanding of software development lifecycle and operations methodologies.
  • Strong analytical, problem-solving, oral, written, and presentation skills.
  • Ability to work independently and collaboratively; bachelor’s degree or higher in Computer Science, Management Information Systems, Accounting, or equivalent experience.

Culture & Benefits

  • Hybrid work arrangement with an immersive, in-person onboarding experience.
  • Well-being support, social-impact initiatives, and talent-development and community programs.
  • Equal-opportunity employment and reasonable accommodation support throughout the application, interview, and onboarding process.
  • Global community spanning more than 20 offices worldwide.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →