Information Security GRC Specialist - Information Security Management Office, Information Security & Privacy Governance Department (ISPD)
LocationTokyo, Japan
Typefull-time
SenioritySenior
Experience5+ yrs
DepartmentInformation Security & Privacy Governance Department
Company size10,000+ people
PostedApr 28, 2026 · 5mo ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
Effective communication skills with CISO community and stakeholders
Over 5 years of experience in planning or managing the implementation of information security, internal information systems, or internet service-related information systems
Over 3 years of experience in formulating internal regulations related to information security or IT governance
Japanese: Native level proficiency
English: Business level (TOEIC 800 or above)
Possession of certifications such as CISSP or IPA (Registered Security Specialist)
Experience and knowledge related to ISMS ISO/IEC 27001 certification activities
Experience in building and operating systems on public cloud services
Skills
ISMS
ISO/IEC 27001
public cloud services
Job Description:
Department Overview
The Information Security & Privacy Governance Department is a part of the Technology Management Division, which is a common technical division within the Rakuten Group. The Information Security Management Office oversees information security governance within the Rakuten Group, formulates regulations related to information security governance, supports implementation in development and business departments, monitors, and provides employee education/awareness.
The Information Security Policy Group is a team under the Group CISO (Chief Information Security Officer) responsible for formulating regulations for the Rakuten Group. The Information Security Specialist in this group is responsible for planning and drafting security policy, formulation strategies, creating specific policies, and managing the formalization process.
In the process of policy formulation, the role also involves prior coordination with relevant departments and group companies, as well as providing explanations and guidance to ensure the formalized policies are effectively implemented.
This is a critical position at the core of the Group’s information security governance, where various security requirements are materialized while considering global standards, industry norms, and technical feasibility.
Position:
Position Details
•
Formulation and maintenance of Rakuten Group regulations, as well as Rakuten Group, Inc.'s Information Security Policy and related policies, including those for AI.
•
Gathering requirements through regular communication with relevant departments and group companies, and executing and managing the formalization process.
•
Acquiring information on industry trends and regulatory changes related to information security and sharing it with the CISO community.
•
Preparing reports for the Rakuten Group CIO, CISO, and management meetings, as directed by the Head of the Information Security & Privacy Governance Department.
Mandatory Qualifications:
•
Effective communication skills with CISO community and stakeholders.
•
Over 5 years of experience in planning or managing the implementation of information security, internal information systems, or internet service-related information systems.
•
Over 3 years of experience in formulating internal regulations related to information security or IT governance.
•
Japanese Requirements: Native Level
Desired Qualifications:
•
Possession of certifications such as CISSP (Certified Information Systems Security Professional) or IPA (Registered Security Specialist).
•
Experience and knowledge related to ISMS ISO/IEC 27001 certification activities.
•
Experience in building and operating systems on public cloud services.
Other Information:
Additional information on English Qualification
Business Level (TOEIC 800 or above)
#corporate
#informationsecurity
#privacygovernance
#technologymanagementdiv
More roles at Rakuten
Information Security Specialist - International Standard & System Section, Information Security & Privacy Governance Department (ISPD)International Sales / Business Development - US/EU Business Section, Overseas Sales Strategy Department (Rakuten Ichiba) (C&M)Forward Deployed Engineer (AI Consultant / AI Engineer) - AI Product Development Section , Enterprise Solution Development Department , Group Sales Division (GSD)Head of Relational Marketing Intelligence - Ad & Media Company(A&M)Manager Candidate - Inquiry Management Section, Crime Prevention & Control Department, Group Compliance Supervisory Department (CPCD)