Назад
4 дня назад

Staff Security Compliance Analyst (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
Japan
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Staff Security Compliance Analyst (Cybersecurity): Implementing and assessing security controls for Okta’s cloud-based computing environment with an accent on ISMAP, SOC 2, ISO 27001, and other international compliance frameworks. Focus on leading compliance assessments, testing controls, analyzing gaps, coordinating remediation, and developing security documentation for auditors and process owners.

Location: Tokyo, Japan; hybrid work

Company

Okta provides identity and access management infrastructure designed to secure organizations, AI systems, and human identities.

What you will do

  • Participate in security compliance assessments of Okta’s computing environment, focusing on security controls.
  • Facilitate ISMAP compliance assessments and lead private-sector compliance initiatives.
  • Interpret requirements across multiple frameworks and maintain the common controls framework.
  • Schedule compliance walkthroughs, coordinate communications, and report on project visibility, metrics, and progress.
  • Perform controls testing, analyze gaps, recommend remediation, and help process and control owners prioritize closure.
  • Develop security documentation, including system security plans, information security policies, and risk assessment procedures; assess security impacts of system and application changes.

Requirements

  • 5–7+ years of experience in information technology or a similar field, preferably in a Security Governance, Risk, or Compliance role.
  • Comprehensive understanding of IT security practices and the Governance, Risk, and Compliance lifecycle.
  • Fluent English and Japanese.
  • Experience at an ISMAP-compliant organization or performing ISMAP assessments.
  • Familiarity with Japanese cybersecurity laws and regulations.
  • Knowledge of security frameworks and best practices, including NIST, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC 2 Trust Principles and Criteria.
  • Understanding of software development lifecycle and IT operations methodologies.
  • Strong analytical, problem-solving, oral, written, and presentation communication skills.
  • Ability to work independently and with a team.
  • Bachelor’s degree or higher in Computer Science, Management Information Systems, Accounting, or equivalent experience.

Culture & Benefits

  • Hybrid role with an in-person onboarding experience.
  • Global community spanning more than 20 offices worldwide.
  • Programs supporting well-being, social impact, talent development, connection, and community.
  • Equal opportunity employment and reasonable accommodation support during application, interviews, and onboarding.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →