Cyber Security Specialist Manager

Job Type
年収:940万円 - 1200万円(経験と能力に基づく)
Japanese Level
English Level
Fluent (TOEIC 990)
Start Date




‐ サイバーセキュリティの動向、対応事項の検討、サイバー事案への対応方針のとりまとめ
‐ セキュリティインシデント発生時の対処、インシデントレスポンス
‐ サイバーセキュリティに関するグローバルプロジェクトの企画・推進
‐ 情報セキュリティに関する社内研修、周知活動への企画・推進
‐ 外部委託先との協働での各種セキュリティ関連業務の遂行、委託先管理監督経験
‐ 当局の監督指針などガイドラインに対する知見、それらへの準拠対応評価経験
‐ ITリスク(主にサイバーセキュリティ関連)内部統制評価、改善事項の検討、対応支援
‐ アプリケーション・インフラセキュリティ脆弱性対応

Our client, global insurance firm, is looking for a Cyber Security Specialist Manager for the IT Risk & Security Team. They are one of the largest insurance services provider in Japan.

As an IT Risk & Security Department, you will prevent business impacts due to information leakage and to quickly and efficiently solve problems when an incident occurs.

As a financial institution, strict information leakage countermeasures are required, and the company aims to implement new technologies. In this position, you will be able to participate in collaborative projects with the US headquarters and a wide range of (multinational members) departments by acquiring the latest technology knowledge and engaging in IT security governance.

‐ Knowledge of latest trends in cyber security, examination of response items, compilation of response policies for cyber incidents
‐ Handling security incidents and incident responses
‐ Planning and promotion of global projects related to cyber security
‐ In-house training on information security, planning and promotion of public awareness activities
‐ Implementation of various security-related tasks in collaboration with outsourcing contractors, experience in managing and managing contractors
‐ Knowledge of guidelines such as supervisory guidelines of the authorities, and experience of evaluating compliance with those guidelines
‐ IT risk (mainly cyber security related) internal control evaluation, consideration of improvement items, response support
‐ Application infrastructure security vulnerability response

【会社概要 | Company Details】
Global insurance company with over 40 years of experience in Japan with strengths in various sales channels and product lineup. The company focuses on creating diverse environments including but not limited to promoting the appointment of women.

【就業時間 | Working Hours】
9:00 - 17:00(Mon - Fri)

【休日休暇 | Holidays】
Saturday, Sunday, and National Holidays, Year-end and New Year Holidays, Paid Holidays, Other Special Holidays

【待遇・福利厚生 | Services / Benefits】
Social insurance, Transportation Fee, etc.

Required Skills

‐ 金融機関におけるシステムリスク評価に関する実務経験
‐ 金融機関におけるシステム部門での実務経験。あるいは、金融機関に対する情報セキュリテイコンサルティングまたはシステム監査等の実務経験
‐ システムセキュリティ、サイバーインシデント対応に関する知識
‐ 金融庁監督指針やガイドラインをベースとしたITに関する知識
‐ 金融業界(特に保険業界)における業務の基礎知識
‐ 各種プロジェクトの管理・遂行力

‐ Experience in system risk assessment at financial institutions
‐ Work experience in systems department at a financial institution. Or, practical experience such as information security consulting or system audit for financial institutions
‐ Knowledge about system security and cyber incident response
‐ Knowledge of IT based on FSA supervisory guidelines and guidelines
‐ Basic knowledge of operations in the financial industry (especially the insurance industry)
‐ Ability to manage and execute various projects

Preferred Skills

‐ グローバルにおいて推進しているセキュリティプロジェクトにおいて、US本国及び国内IT部門においてコミュニケーションを行い、プロジェクトを推進することが出来るスキル
‐ 国内プロジェクトおよびグローバルプロジェクトにおいて、セキュリティに関する課題について、社内各種関係部門(IT部門に限らない)に対して自発的に働きかけ、プロジェクトの推進やセキュリティの観点からリードしていくことができる折衝力
‐ ロジカルシンキング/ライティング・スキル
‐ 金融機関に対するITリスク管理体系、サイバーセキュリティリスク管理フレームワークの構築支援経験
‐ サイバーセキュリティに対する対応態勢構築経験、最新動向の収集分析能力

‐ Skills to communicate and promote the project in the US and domestic IT departments in security projects promoted globally
‐ Negotiating ability to voluntarily work on various internal departments (not limited to IT departments) on security issues in domestic projects and global projects, and lead from the perspective of project promotion and security
‐ Logical thinking / writing skills
‐ Experience in supporting the establishment of IT risk management system and cyber security risk management framework for financial institutions
‐ Cyber security response system building experience, ability to collect and analyze latest trends