Shared Chief Information Security Officer (Cybersecurity)

TL;DR

Shared Chief Information Security Officer (Cybersecurity): Strengthening client cybersecurity postures through risk management, security controls, compliance, monitoring, and incident response with an accent on security architecture, regulatory alignment, and operational cyber defense. Focus on coordinating security across business units, leading forensic investigations and technical audits, and integrating Security by Design into enterprise projects.

Location: Not specified

Company

Independent technology consulting firm providing technology guidance and solutions to more than 1,000 clients through an international workforce across over 60 countries.

What you will do

• Report client security posture, risks, activities, and compliance status to CISO and regional leadership.
• Analyze business issues, critical assets, and regulatory requirements to define local security strategies aligned with global frameworks.
• Ensure monitoring coverage and effective configuration of security platforms across infrastructure and applications.
• Oversee hardening, vulnerability scanning, patching, access reviews, privileged access, and security exceptions.
• Coordinate incident response, digital forensics investigations, backlog follow-up, and cyber defense reporting.
• Plan technical audits, penetration tests, and red or purple team exercises.

Requirements

• At least 10 years of cybersecurity experience, including network security, endpoint protection, cloud security, IAM, data protection, encryption, and security architecture.
• 8–10 years of experience designing, implementing, and auditing organizational security controls, with knowledge of ISO 27001, NIST CSF, and CIS Controls.
• Experience in cyber defense operations, threat detection, digital forensics, incident response, vulnerability assessments, penetration testing, and risk assessments.
• At least 5 years of experience integrating security into enterprise projects and coordinating cybersecurity functions across multiple business units or subsidiaries.
• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or a related field.
• Japanese: native or near-native proficiency; English: full professional fluency.

Nice to have

• Master’s degree or MBA in Information Security Management.
• Certifications such as CISSP, CISM, CISA, CRISC, or ISO 27001 Auditor.

Culture & Benefits

• International community representing more than 110 nationalities.
• Internal Academy with more than 250 training modules.
• Regular internal events, including afterworks and team-building activities.
• Opportunities to lead social and environmental impact projects through the WeCare Together program.
• Inclusive, equal-opportunity working environment.

Hiring process

• Brief virtual or phone call.
• Approximately three interviews, adjusted to the role and seniority.
• Potential case study, technical assessment, role play, or problem-solving exercise.