У роли понятный senior-фокус в известной компании в сфере защиты цифровых идентификаторов и заметная ответственность за комплаенс; широкий набор стандартов и требования к опыту в Японии сужают круг подходящих специалистов.
Staff Security Compliance Analyst (Cybersecurity): Implementing and assessing security controls for Okta’s cloud-based computing environment with an accent on ISMAP, SOC 2, ISO 27001, and other international compliance frameworks. Focus on leading compliance assessments, testing controls, analyzing gaps, coordinating remediation, and developing security documentation for auditors and process owners.
Location: Tokyo, Japan; hybrid work
Company
Okta provides identity and access management infrastructure designed to secure organizations, AI systems, and human identities.
What you will do
Participate in security compliance assessments of Okta’s computing environment, focusing on security controls.
Facilitate ISMAP compliance assessments and lead private-sector compliance initiatives.
Interpret requirements across multiple frameworks and maintain the common controls framework.
Schedule compliance walkthroughs, coordinate communications, and report on project visibility, metrics, and progress.
Perform controls testing, analyze gaps, recommend remediation, and help process and control owners prioritize closure.
Develop security documentation, including system security plans, information security policies, and risk assessment procedures; assess security impacts of system and application changes.
Requirements
5–7+ years of experience in information technology or a similar field, preferably in a Security Governance, Risk, or Compliance role.
Comprehensive understanding of IT security practices and the Governance, Risk, and Compliance lifecycle.
Fluent English and Japanese.
Experience at an ISMAP-compliant organization or performing ISMAP assessments.
Familiarity with Japanese cybersecurity laws and regulations.
Knowledge of security frameworks and best practices, including NIST, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC 2 Trust Principles and Criteria.
Understanding of software development lifecycle and IT operations methodologies.
Strong analytical, problem-solving, oral, written, and presentation communication skills.
Ability to work independently and with a team.
Bachelor’s degree or higher in Computer Science, Management Information Systems, Accounting, or equivalent experience.
Culture & Benefits
Hybrid role with an in-person onboarding experience.
Global community spanning more than 20 offices worldwide.
Programs supporting well-being, social impact, talent development, connection, and community.
Equal opportunity employment and reasonable accommodation support during application, interviews, and onboarding.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →