Cisco ISMAP Security & Compliance Engineer - Bilingual 独占求人

We have recently opened a new position supporting a Cisco project in Japan.

Position: Cisco ISMAP Security & Compliance Engineer

Location: Tokyo

Language: Japanese & English (Bilingual)

Please find the attached JD for your reference.

Key requirements include:

• 7+ years of cybersecurity experience

• 5+ years of cloud security experience

• Strong knowledge of security and compliance frameworks such as ISMAP, ISO27001, and NIST

• Experience in audit, governance, risk, compliance, and security documentation

• Strong communication and stakeholder management skills

• Business-level Japanese and English

Candidates with certifications such as CISSP, CISA, CCSK, or ISO27001-related certifications would be highly preferred.

 Position Overview 

HCLTech Japan is seeking an experienced ISMAP Security Compliance Engineer to support a strategic Cisco security compliance initiative in Japan. 

The successful candidate will play a key role in achieving and maintaining ISMAP certification by supporting security compliance programs, audit activities, documentation management, regulatory alignment, and continuous compliance monitoring. 

This role requires close collaboration with Japanese and global stakeholders, auditors, compliance teams, and security operations teams. 

Key Responsibilities 

ISMAP Compliance & Certification 

• Support ISMAP certification and compliance initiatives 
• Conduct security compliance assessments and gap analysis 
• Support remediation planning and compliance activities 
• Ensure alignment with Japanese regulatory requirements 

Audit Support & Governance 

• Support internal and external audit activities 
• Prepare and manage audit evidence and documentation 

•  

• Coordinate auditor reviews and stakeholder communications 
• Track audit findings and remediation actions 

• Documentation & Localization 

• Develop, maintain, and localize security documentation 
• Create policies, procedures, standards, MoPs, and audit artifacts 
• Support English-Japanese documentation reviews 
• Ensure compliance documentation remains current and audit-ready 

•  

  Continuous Monitoring 

• Support ongoing compliance monitoring activities 
• Maintain security and compliance evidence repositories 
• Participate in continuous certification maintenance activities 
• Support governance reporting and compliance reviews 

Stakeholder Management 

• Coordinate with global security teams and Japanese stakeholders 
• Facilitate discussions between English and Japanese-speaking teams 
• Support compliance workshops and audit meetings 

Required Qualifications 

Language 

• Business-level Japanese (mandatory) 
• Business-level English (mandatory) 
• Ability to communicate effectively with both technical and non-technical stakeholders 

Professional Experience 

• 7+ years of cybersecurity experience 
• 5+ years of cloud security experience 

•  

• Experience supporting security, risk, compliance, or privacy programs 

• Compliance & Regulatory Knowledge 

  Hands-on experience in one or more of the following: 

• ISMAP 
• ISO 27001 
• NIST 
• Security Governance 
• Risk Management 
• Compliance Programs 
• Audit Management 
• Privacy & Security Control Frameworks 

•  

  Cloud Security 

  Strong understanding of: 

• AWS 
• Microsoft Azure 

• Google Cloud Platform (GCP) 

Preferred Qualifications 

Security & Compliance Certifications 

• CISSP 
• CISA 
• CCSK 
• CISM 
• ISO 27001 Lead Auditor 

Security Domains 

Experience with: Classification: Internal 

• Identity & Access Management 
• Authentication & Authorization 
• Vulnerability Management 
• Disaster Recovery 
• Security Operations 
• Security Architecture 

Technical Exposure 

Knowledge of: 

• Python 
• Ansible 
• Git 
• Jenkins 
• VS Code 
• Infrastructure as Code (IaC) 
• SD-WAN Technologies 

Ideal Candidate Profile 

We are particularly interested in professionals from the following backgrounds: 

• Cybersecurity Consultant 
• GRC Consultant 
• ISMAP Consultant 
• ISO 27001 Consultant 
• Security Compliance Specialist 
• Cloud Security Consultant 
• Security Governance Lead 
• Risk & Compliance Analyst 

Classification: Internal 

• IT Auditor 
• Big4 Cybersecurity Consultant