在招职位 0
订阅提醒 登录
发布于 2026-02-19 英文原文

信息安全政策组副组长

情報セキュリティ・プライバシーガバナンス部 情報セキュリティ統括室:情報セキュリティポリシーグループ ヴァイスグループマネージャー(ISPD)

楽天グループ

职种法务/合规 雇用形态—
工作地点日本 薪资面议

职位概要

乐天集团技术管理本部信息安全与隐私治理部信息安全政策组负责制定乐天集团信息安全规章及乐天株式会社信息安全政策(隶属集团CISO管辖)。本职位为信息安全政策组副组长,协助组长进行安全政策方针的规划、制定、起草与正式化,包括涉及AI的相关政策。职责包括:制定并维护集团规章及信息安全政策;与相关部门及集团公司定期沟通收集需求并执行正式化流程;收集信息安全行业趋势与法规变化信息并与CISO社区共享;为集团CIO、CISO及经营会议准备报告;作为团队进行项目管理或亲自负责上述工作;协助政策组运营。必备条件:5年以上信息安全、内部信息系统或互联网服务信息系统规划或实施管理经验;3年以上信息安全或IT治理等内部规章制定经验;3年以上组长等管理支持角色经验;英语商务水平(TOEIC 800以上);日语母语水平。优先条件:持有CISSP或IPA信息技术工程师资格;具备ISMS ISO/IEC 27001认证活动经验与知识;具备公有云构建运营经验或AWS、GCP、Microsoft认证。本职位处于集团信息安全治理核心,需在考虑全球标准、行业标准及技术可行性的同时具体化各项安全要求。

职位描述

Job Description: Business Overview The Technology Management Division (TMD) provides Corporate IT, and Cyber Security & Privacy Governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening the technology foundation. Department Overview The Information Security & Privacy Governance Department (ISPD) enables and accelerates business growth by establishing, maintaining, and enhancing robust information security, privacy, data, and AI governance frameworks across the Rakuten Group. We ensure Rakuten's global operations are secure, compliant, and innovative by adhering to regulatory requirements, providing comprehensive employee training, strategically managing data assets, and governing AI responsibly. The Information Security Management Office oversees information security governance within the Group. It is responsible for establishing regulations related to Rakuten Group's information security governance, supporting implementation for development and business departments, monitoring, and employee training. Position: Why We Hire The Information Security Policy Group is responsible for formulating Rakuten Group Information Security Regulations and Rakuten Group, Inc. Information Security Policies, which are under the jurisdiction of the Group CISO. As Vice Manager of the Information Security Policy Group, you will assist the Group Manager in planning, formulating, drafting, and formalizing security policy guidelines. This role also involves pre-coordination with relevant departments and group companies during policy formulation, as well as providing explanations and commentary for the operation of formalized policies. This is a critical position at the core of group information security governance, responsible for concretizing various security requirements while considering global standards, industry standards, and technical feasibility. Position Details Responsibilities: - Formulate and maintain Rakuten Group Regulations, and Rakuten Group, Inc. Information Security Policies and related policies, including those pertaining to AI. - Gather requirements through regular communication with relevant departments and individual group companies, and execute and manage the formalization process. - Obtain information on industry trends and regulatory changes related to information security and share it with the CISO community. - Prepare reports for the Rakuten Group CIO, CISO, and management meetings, to be presented by the Head of the Information Security & Privacy Governance Department. - Program management for executing the above roles as a team, or personally taking charge of these responsibilities. - Assist in the operation of the Information Security Policy Group. Mandatory Qualifications: - 5+ years of experience in planning or implementation management of information security, internal information systems, or information systems for internet service provision. - 3+ years of experience in formulating internal regulations such as information security or IT governance. - 3+ years of experience in a support role for management, such as a group leader. - English Requirement: Business Level (TOEIC 800 or higher) - Japanese Requirement: Native Desired Qualifications: - Certified Information Systems Security Professional (CISSP) qualification or Information Technology Engineer Examination (IPA) qualification. - Experience and knowledge regarding ISMS ISO/IEC 27001 certification activities. - Experience in building and operating on public cloud services, or holding AWS, GCP, or Microsoft certifications. #business #informationsecurity #privacygovernance #technologymanagementdiv In Japanese, Rakuten stands for ‘optimism.’ It means we believe in the future. It’s an understanding that, with the right mind-set, we can make the future better by what we do today. So we challenge ourselves to evolve, innovate and experiment, to create a better, brighter future for everyone. Today, our 70+ businesses span e-commerce, digital content, communications and fintech, bringing the joy of discovery to almost 1.3 billion members across the world. If you have any trouble logging in, please contact us here Rakuten Group, Inc.: rakuten-recruiting-info@mail.rakuten.com *Please read the Application Requirements(EN) / 募集要é (JP) before applying. Our Diversity & Inclusion Policy and Application Documents Rakuten’s corporate mission is to “contribute to society by creating value through innovation and entrepreneurship.” We foster a culture that provides equal opportunities to those who share this founding philosophy and take on the challenge to transform society, regardless of age, gender, nationality, or any other status. Diversity is one of Rakuten's core strategies and a driving force for innovation. Because of this, you are not required to submit any of the following information in order to apply for our job positions. - Gender - Age - Photo - Nationality* - Information not related to business, such as ideological beliefs, family structure, etc. * For legal compliance, we may ask you about your work eligibility. See the details