信息安全专家（信息安全政策组）

Job Description: Department Overview The Information Security & Privacy Governance Department is a part of the Technology Management Division, which is a common technical division within the Rakuten Group. The Information Security Management Office oversees information security governance within the Rakuten Group, formulates regulations related to information security governance, supports implementation in development and business departments, monitors, and provides employee education/awareness. The Information Security Policy Group is a team under the Group CISO (Chief Information Security Officer) responsible for formulating regulations for the Rakuten Group. The Information Security Specialist in this group is responsible for planning and drafting security policy, formulation strategies, creating specific policies, and managing the formalization process. In the process of policy formulation, the role also involves prior coordination with relevant departments and group companies, as well as providing explanations and guidance to ensure the formalized policies are effectively implemented. This is a critical position at the core of the Group's information security governance, where various security requirements are materialized while considering global standards, industry norms, and technical feasibility. Position: Position Details - Formulation and maintenance of Rakuten Group regulations, as well as Rakuten Group, Inc.'s Information Security Policy and related policies, including those for AI.
 - Gathering requirements through regular communication with relevant departments and group companies, and executing and managing the formalization process. - Acquiring information on industry trends and regulatory changes related to information security and sharing it with the CISO community.
 - Preparing reports for the Rakuten Group CIO, CISO, and management meetings, as directed by the Head of the Information Security & Privacy Governance Department. Mandatory Qualifications: - Effective communication skills with CISO community and stakeholders. - Over 5 years of experience in planning or managing the implementation of information security, internal information systems, or internet service-related information systems.
 - Over 3 years of experience in formulating internal regulations related to information security or IT governance. - Japanese Requirements: Native Level Desired Qualifications: - Possession of certifications such as CISSP (Certified Information Systems Security Professional) or IPA (Registered Security Specialist). - Experience and knowledge related to ISMS ISO/IEC 27001 certification activities. - Experience in building and operating systems on public cloud services. Other Information: Additional information on English Qualification Business Level (TOEIC 800 or above) #corporate #informationsecurity #privacygovernance #technologymanagementdiv In Japanese, Rakuten stands for ‘optimism.’ It means we believe in the future. It’s an understanding that, with the right mind-set, we can make the future better by what we do today. So we challenge ourselves to evolve, innovate and experiment, to create a better, brighter future for everyone. Today, our 70+ businesses span e-commerce, digital content, communications and fintech, bringing the joy of discovery to almost 1.3 billion members across the world. If you have any trouble logging in, please contact us here Rakuten Group, Inc.: rakuten-recruiting-info@mail.rakuten.com *Please read the Application Requirements(EN) / 募集要é (JP) before applying. Our Diversity & Inclusion Policy and Application Documents Rakuten’s corporate mission is to “contribute to society by creating value through innovation and entrepreneurship.” We foster a culture that provides equal opportunities to those who share this founding philosophy and take on the challenge to transform society, regardless of age, gender, nationality, or any other status. Diversity is one of Rakuten's core strategies and a driving force for innovation. Because of this, you are not required to submit any of the following information in order to apply for our job positions. - Gender - Age - Photo - Nationality* - Information not related to business, such as ideological beliefs, family structure, etc. * For legal compliance, we may ask you about your work eligibility. See the details