One of the biggest law firms in Japan is looking for a talented IT Security and Risk Manager.

The ideal candidate will be responsible for the firm's IT security and risk management program, both in Japan and internationally. This includes identifying, assessing, and reporting regulatory, IT, and cyber security risks to the firm's information assets as well as assisting in achieving business objectives.

Responsibilities

- Develop & implement security programs

- Assess and analyze IT security risks, especially cybersecurity risks

- Develop, update, and maintain IT security policies and regulations

- Facilitate the selection and implementation of security technologies and solutions

- Conduct IT security awareness and compliance training

- Develop and implement incident response plans

- Vulnerability assessment and risk evaluation of information assets

- Develop and implement security risk mitigation measures

- Manage the office staff (approx. 4 members) and contractors

【Company Details】

Founded in 1966, today its one of the biggest Japanese Law firm and currently operates in more than 10 countries. Global environment and currently expanding the operations in many countries. Its fundamental mission is to contribute to the realization of an affluent and fair society based on “the rule of law.” The currently house over 800 lawyers and the Legal 500 rank N&A as a top tier firm in the fields of antitrust and competition law, banking & finance, capital markets, construction, corporate and M&A, dispute resolution, as well as Projects & Energy sectors.

【Working Hours】

Flextime (core hours 11:00-15:00), Mon-Fri Hybrid (approx. 5-6 days per month in office)

【Holidays】

Saturday, Sunday, and National Holidays, Year-end and New Year Holidays, Paid Holidays, Other Special Holidays

【Services / Benefits】

Full social insurance (health, employee pension, workers' accident compensation, and unemployment insurance), no smoking indoors allowed (designated smoking area), transportation fee, etc.

- Experience in Information Security

- Experience in information security risk assessment, policy development, and security incident response

- In-depth knowledge of common frameworks such as NIST, ISO27001, CSF etc

- Knowledgeable/experienced in Cyber Security & problem management

- Leadership, Communication & Problem-solving ability