【日系IT大手】情報セキュリティQA｜長期就業可

EC、金融サービス、通信、デジタルソリューションなど、幅広い事業を展開する大手グローバルテクノロジー企業にて、情報セキュリティQAスペシャリストを募集しています。

本ポジションでは、外部委託先やベンダーのセキュリティ評価、社内情報セキュリティポリシーへの準拠状況の確認、ITリスクの特定・改善提案などを担当していただきます。

契約更新の可能性あり・長期就業を前提としたポジションです。

• 外部委託先・ベンダーのセキュリティ評価：チェックリストに基づき、委託先のセキュリティ対策を評価する。
• 情報セキュリティ統制・コンプライアンス確認：社内ポリシーやセキュリティ基準への準拠状況を確認する。
• ITリスクの特定・改善提案：セキュリティリスクや運用上の課題を特定し、改善策を提案する。
• セキュリティ関連の問い合わせ対応：社内からのセキュリティ方針やコンプライアンスに関する問い合わせに対応する。
• 社内関係者へのセキュリティ助言：事業部門やIT部門に、業務やプロジェクトに応じた助言を行う。
• セキュリティガバナンス・リスク管理：全社的なリスク評価やコンプライアンス対応を支援する。
• 部門横断的な連携：関係部門と協働し、セキュリティ対策の標準化や意識向上を推進する。

Are you an experienced IT Security or Information Security professional looking to advance your career in Tokyo's technology sector?

A leading global technology company in Japan is seeking an IT Security QA Specialist to support information security governance, third-party risk assessments, and internal security compliance.

In this contract position, you will assess vendor security controls, identify potential information security risks, and help ensure business activities comply with internal security policies. You will also provide security guidance to internal stakeholders and contribute to ongoing governance, risk, and compliance (GRC) initiatives.

This opportunity is ideal for a bilingual IT security professional with experience in information security assessments, IT risk management, security compliance, or vendor risk assessments who wants to strengthen their expertise in an international technology environment.

• Third-Party Security Assessments: Conduct information security assessments of external vendors and outsourced service providers using established security checklists and evaluation procedures.
• Security Controls & Compliance: Review existing security controls and evaluate compliance with internal information security policies, standards, and operational requirements.
• IT Risk Identification & Mitigation: Identify potential information security vulnerabilities and operational risks, assess their implications, and recommend appropriate improvements.
• Information Security Policy Support: Respond to internal inquiries regarding information security policies, security requirements, and compliance procedures.
• Stakeholder Security Advisory: Provide practical information security guidance to internal teams on business activities, IT projects, and operational initiatives.
• Security Governance & Risk Management: Support ongoing information security governance, risk assessment, and compliance activities across the organization.
• Cross-Functional Collaboration: Work with business and technology stakeholders to promote consistent security practices and strengthen organizational security awareness.

必須条件 経験・資格：

• 情報セキュリティ、ITセキュリティガバナンス、ITリスク管理、または関連分野における実務経験 3年以上
• 情報セキュリティ要件やセキュリティ統制を含むITプロジェクトの経験
• 情報セキュリティポリシー、リスクアセスメント、ITコンプライアンス手続きに関する実務的な知識
• 大学卒業以上、または堂々の実務経験

• 高い分析力と問題解決能力
• 優れたコミュニケーション能力と関係者調整力
• 細部まで注意を払う正確性
• 部門横断的なチームとの協働力
• セキュリティリスクを自ら発見し、対処する主体性
• 優れた業務管理能力と時間管理能力

• 日本語： ネイティブレベル
• 英語： ビジネスレベル（TOEIC 700点以上）

• サードパーティリスク管理、または外部委託先・ベンダーのセキュリティ評価の実務経験
• ISO/IEC 27001および情報セキュリティマネジメントシステム（ISMS）の知識
• 情報処理安全確保支援士（SC）資格、または同等の知識
• CCSP（認定クラウドセキュリティプロフェッショナル）など、クラウドセキュリティ関連資格
• 情報セキュリティマネジメント（SG）またはCompTIA Security+資格
• TOEIC 800点以上

EC、金融サービス、通信、デジタルソリューションなど、多様な事業領域でサービスを展開する大手グローバルテクノロジー企業です。

日本国内および海外市場で幅広く事業を展開し、テクノロジーとイノベーションを通じた事業成長を推進しています。

• 日系グローバル企業：大手テクノロジー企業で実績を積めます。
• 大規模なセキュリティ業務：全社的なセキュリティガバナンス、委託先評価、サードパーティリスク管理に携われます。
• 専門性の高いチーム：情報セキュリティ、ITリスク管理、GRC、コンプライアンスの専門性を高められます。
• 契約更新の可能性あり：長期就業を前提としたポジションです。
• ワークライフバランス良好：土日祝休み、残業少なめで、仕事とプライベートを両立しやすい環境です。
• カジュアルな職場環境：服装自由で、柔軟なスタイルで働けます。

• Minimum 3 years of professional experience in information security, IT security governance, IT risk management, or a related field.
• Experience participating in IT projects involving information security requirements, security controls, or compliance procedures.
• Sound understanding of information security policies, security risk assessments, and IT compliance processes.
• Ability to evaluate security controls, identify risks, and recommend practical improvements based on established security requirements.

• Strong analytical and problem-solving abilities to assess information security risks and recommend appropriate solutions.
• Excellent communication and stakeholder management skills, with the ability to explain security requirements to technical and non-technical colleagues.
• High attention to detail and accuracy when reviewing security controls and assessment findings.
• Ability to collaborate effectively with cross-functional business and technology teams.
• Proactive approach to identifying security concerns and supporting risk mitigation initiatives.
• Strong organizational and time management skills, with the ability to manage multiple assessments and stakeholder requests.

• Japanese: Native-level or equivalent fluent proficiency for internal stakeholder communication, security assessments, and policy discussions.
• English: Business-level proficiency, with a minimum TOEIC score of 700, for communication and collaboration in an international working environment.

• Experience in third-party risk management (TPRM), vendor security assessments, or outsourced service provider security reviews.
• Knowledge of ISO/IEC 27001 and Information Security Management Systems (ISMS).
• IPA Registered Information Security Specialist (SC) certification or equivalent information security expertise.
• Certified Cloud Security Professional (CCSP) certification or another relevant cloud security qualification.
• IPA Information Security Management (SG) or CompTIA Security+ certification.
• TOEIC score of 800 or above.
• Experience supporting security governance, risk, and compliance activities within a large enterprise or international technology organization.

Our client is a leading global technology company with operations spanning e-commerce, financial services, telecommunications, and digital solutions.

With a strong presence in Japan and international markets, the organization operates in a dynamic technology environment where information security, risk management, and regulatory compliance are essential to supporting business operations.

The company places significant importance on maintaining effective information security controls, managing third-party risks, and promoting consistent security governance across its business activities.

This role offers an opportunity to gain experience in enterprise information security, IT security governance, and third-party risk management while collaborating with stakeholders across different business and technology functions.

• Global Technology Environment: Join a major international technology company with a strong presence in Japan and overseas markets.
• Enterprise-Level Security Experience: Gain practical exposure to information security governance, vendor security assessments, and third-party risk management.
• International Collaboration: Work in a multicultural environment with diverse business and technology stakeholders.
• Professional Development: Strengthen your knowledge of IT security, governance, risk management, and compliance (GRC) through hands-on responsibilities.
• Long-Term Contract Opportunity: Benefit from a long-term contract position with the potential for continued renewals.
• Work-Life Balance: Enjoy a structured Monday-to-Friday schedule, with weekends and public holidays off and minimal overtime.
• Casual Dress Code: Work in an environment that allows casual clothing.
• Career Growth in IT Security: Build valuable experience that can support future opportunities in information security, IT risk management, security governance, and compliance.