发布于 2026-08-12
英文原文
信息安全管理办公室 - ISMS运营与支持组
情報セキュリティ・プライバシーガバナンス部 グローバルISMSオペレーション・サポートグループ:情報セキュリティスペシャリスト(ISPD)
楽天グループ
| 职种 | 工程 | 雇用形态 | — |
|---|---|---|---|
| 工作地点 | 日本(东京) | 薪资 | 面议 |
职位概要
该职位隶属于乐天集团技术管理部门下的信息安全与隐私治理部,作为信息安全管理办公室ISMS运营与支持组成员,负责通过ISMS(信息安全管理体系)的运营与管理,提升乐天集团全球组织的信息安全水平。主要职责包括:基于ISO/IEC 27001开展ISMS运营活动并应对外部审计;识别、评估信息安全风险并制定实施对策,提出技术措施预防安全事件;策划实施内部信息安全教育培训,制作在线学习内容并推动安全意识提升;与海外办公室及多元团队协作,支持ISMS在全球范围内的推广与部署,参加全球团队定期会议并管理进度;与其他部门及集团公司合作,提出并实施安全问题的解决方案。任职要求:3年以上ISMS实际工作经验;熟悉ISO/IEC 27001等信息安全框架;具备计算机与网络基础IT知识;优秀的跨职能团队沟通协作能力;英语商务水平(TOEIC 800分以上);日语母语水平。优先条件:持有信息安全相关认证(如IPA注册信息安全专家、CISSP、CISA、CompTIA Security+);具有Web应用、数据库、网络开发维护经验;具有公有云构建运营经验;熟练使用MS Office 365、Confluence、JIRA、ZOOM;了解各国信息安全法律法规并有应对经验。理想人选:责任心强、安全意识高、积极主动迎接挑战,具有全球视野能在多元文化环境中工作,渴望持续学习新技术新知识。
职位描述
Job Description: Department Overview The Information Security & Privacy Governance Department is a division of the Technology Management Division, which serves as a shared technical department for the Rakuten Group. As a member of the Information Security Management Office - ISMS Operation & Support Group , you will contribute to improving the information security of the Rakuten Group's global organization through the operation and management of ISMS (Information Security Management System). In this position, you will play a role in implementing security frameworks such as ISO/IEC 27001, conducting risk assessments, and promoting information security awareness activities. Additionally, you will support the global rollout of ISMS, working in collaboration with overseas offices and diverse teams to standardize and strengthen the security framework across the Rakuten Group. Position: Position Details As a member of the ISMS Office, you will be responsible for the following tasks: ISMS Operation and Management - Conduct ISMS operational activities and respond to external audits to maintain the Information Security Management System based on ISO/IEC 27001. Risk Assessment - Identify, evaluate, and plan/implement countermeasures for information security risks. - Propose technical measures to prevent information security incidents. Security Awareness Activities - Plan and implement internal information security education and training. - Create e-learning content and promote initiatives to raise awareness of information security. Support for Global ISMS Rollout - Collaborate with overseas offices and diverse teams to support the introduction and deployment of ISMS. - Participate in regular meetings with global teams and manage progress. Collaboration with Other Departments - Work with other departments and group companies to propose and implement solutions to security issues. - Understand the characteristics of services and operations to implement appropriate security measures. Mandatory Qualifications: - Over 3 years of practical experience in information security management system (ISMS). - Knowledge of ISO/IEC 27001 and other information security frameworks. - Basic IT knowledge related to computers and networks. - Excellent communication skills to effectively collaborate with cross-functional teams and diverse departments. - English: Business-level proficiency (TOEIC score of 800+). - Japanese: Native-level proficiency. Desired Qualifications: - Possession of information security-related certifications (e.g., Registered Information Security Specialist (IPA), CISSP, CISA, CompTIA Security+). - Experience in the development and maintenance of web applications, databases, and networks. - Experience in building and operating public cloud services. - Proficiency in using MS Office 365 (Excel, PowerPoint, Teams), Confluence, JIRA, and ZOOM. - Knowledge of and experience in responding to information security laws and regulations in various countries. Other Information: Ideal Candidate Profile: A person with a strong sense of responsibility and awareness of information security, who actively tackles challenges. A person with a global perspective who can work in a multicultural environment. Someone eager to continuously learn new technologies and knowledge. #corporate #informationsecurity #privacygovernance #technologymanagementdiv Languages: English (Overall - 3 - Advanced), Japanese (Overall - 4 - Fluent) In Japanese, Rakuten stands for âoptimism.â It means we believe in the future. Itâs an understanding that, with the right mind-set, we can make the future better by what we do today. So we challenge ourselves to evolve, innovate and experiment, to create a better, brighter future for everyone. Today, our 70+ businesses span e-commerce, digital content, communications and fintech, bringing the joy of discovery to almost 1.3 billion members across the world. If you have any trouble logging in, please contact us here Rakuten Group, Inc.: rakuten-recruiting-info@mail.rakuten.com *Please read the Application Requirements(EN) / åéè¦é (JP) before applying. Our Diversity & Inclusion Policy and Application Documents Rakutenâs corporate mission is to âcontribute to society by creating value through innovation and entrepreneurship.â We foster a culture that provides equal opportunities to those who share this founding philosophy and take on the challenge to transform society, regardless of age, gender, nationality, or any other status. Diversity is one of Rakuten's core strategies and a driving force for innovation. Because of this, you are not required to submit any of the following information in order to apply for our job positions. - Gender - Age - Photo - Nationality* - Information not related to business, such as ideological beliefs, family structure, etc. * For legal compliance, we may ask you about your work eligibility. See the details