Skillhouse Internal Career Opportunity
Global Security GRC Manager / Lead
Position Title:
Global Security GRC Manager / Lead
Employment Type:
Permanent
Working Hours:
English Level - Advanced (TOEIC 860), Japanese Level - Advanced (JLPT Level 1)
Salary
Description
A Japan/US AI Solutions Firm is seeking a Global Security GRC Manager/Lead.
Responsibilities:
- Develop and execute the global security governance strategy
- Establish global security policies, guidelines, and related standards
- Align security control policies and frameworks across international offices
- Conduct gap analyses and develop remediation and compliance action plans
- Define, monitor, evaluate, and report on Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs)
- Manage security risk management activities related to ISMS, SOC 2 Type II, and other relevant frameworks
- Establish and maintain risk management policies, internal regulations, and related procedures covering system administration and information management
- Develop and implement risk mitigation and remediation plans
- Oversee ongoing monitoring, continuous improvement, and reporting activities
- Establish and manage AI governance controls
- Design and implement an AI governance framework
- Conduct and evaluate AI risk and impact assessments
- Design control frameworks for AI development and validation processes
- Oversee continuous monitoring, improvement, and reporting
- Enhance and optimize GRC processes and operations
- Respond to security-related inquiries and consultations from customers and employees
- Coordinate and support various audits, including system audits
- Support J-SOX internal control requirements, primarily IT controls, in preparation for an IPO
- Establish and maintain IT governance based on the EDM (Evaluate, Direct, and Monitor) model
- Establishing and maintaining business processes and documentation related to system development and maintenance
- Establishing and maintaining business processes and documentation to ensure the completeness, accuracy, and validity of input data
- Develop and review governance-related plans and initiatives
- Lead and manage the team
- Mentor, develop, and support team members' professional growth
Required Skills:
- 7+ years of professional experience in information security and/or Governance, Risk, and Compliance (GRC)
- 3+ years of experience designing, implementing, and operating security controls in a global business environment
- Proven experience leading ISMS or SOC 2 engagements as the primary person responsible, from control design through audit preparation and execution
- Experience designing KPIs/KRIs and managing their monitoring, evaluation, and reporting
- Experience leading projects and/or managing teams
Why should you apply:
- Combination of IT and Legal (in-house software and skills in a fast-growing company)
- Products that utilize the hottest topics in AI
- Good work-life balance (full flexibility)
Company Details:
This company is a leading global provider of AI software for the legal industry, serving over 7,000 firms and companies worldwide. Originally founded in Japan, it has recently expanded significantly into Silicon Valley and the broader U.S. market. The company fosters a fast-growing, supportive environment that emphasizes continuous learning and skill development through proactive application.
Working Hours : Fully flexible working – no core hours (Mon-Fri)
Working Style: Hybrid (2-3 days WFH possible)
Holidays: Saturday, Sunday, and National Holidays, Year-end and New Year Holidays, Paid Holidays, Other Special Holidays
Services/Benefits: Social Insurance: Health insurance, Employee pension insurance, Unemployment insurance, Worker's compensation insurance, Language learning support, Technical book purchase support, Influenza vaccination support, No smoking indoors (smoking room available in the building), Side jobs are allowed upon request
Interview Process: 4 rounds (HR/Recruiter round - Technical Interview – Team Interview - HR)
