Security Management Specialist

【About the company ...】

"Creating trust to build a smooth society."

The company continues to take on challenges every day to achieve this mission. The business started as a "payment service". However, this is only a small step in achieving the mission that the company envisions. The company wants to create a society where anyone can realize what they want to do through a new ecosystem based on "credit" rather than just a payment service. Let's work together to update the way payment is made, the way credit is given, and the way society is run.

・Company Culture
In order to achieve its mission, the Group companies share a common set of values that are important to each employee and the organization. The three values are "Go Bold," "All for One," and "Be a Pro," which represent the guiding principles for individual behavior. And the four foundations of "Sustainability," "Diversity & Inclusion," "Trust & Openness," and "Well-being for Performance" are the values that form the foundation of the organization. These are essential elements for the Group to achieve its mission no matter how much the size of the organization expands, and they believe that this is a culture that they want to continue to protect.

While valuing this culture, the group actively accepts and acknowledges members with diverse backgrounds, and pursues an environment where everyone can play an active role.

【 Job Description 】

Team mission:

As a Security Management Specialist, you will communicate with other teams at Merpay, Mercoin, and Mercari to help establish a company-wide security/compliance framework. You will be asked to plan and implement new policies, as well as plan and introduce measures based on security criteria and frameworks that aim to mitigate security risks and change employee mindsets.
(Learn more about Mercari's mission and values .)

Note: Your assignment to either Merpay or Mercoin will be decided following the selection process.

Specific work responsibilities include the following:

Build and assess information security management systems and establish and promote information security measures
Advise other teams as an internal security risk and compliance expert
Establish and revise internal regulations regarding information security
Manage and carry out information security programs to conform with regulations
Design and build information security processes, formalize them in writing, and improve existing information security processes
Plan and implement internal education programs and other activities related to information security
Manage security with regard to use of external vendors and services
Monitor, test, and handle incident response related to information security

Unique and Bold Challenges
Build security governance tailored to high-speed business management
Create next-generation security standards for a cloud-native environment
Take on new challenges in the quickly changing environment surrounding this growing business
Swiftly respond to various fintech-related laws and ordinances and relevant government ministries and agencies

--------------------------------------------------

【 Working time 】

Flextime System

【 Welfare 】

・Full social insurance
・Incentive system
・Support system for employees' families
・Support for language learning
・Translation and interpretation support

【 Holiday 】

• 2 days a week (Saturday and Sunday)
• National Holidays
• Summer vacation
• New Year holiday
• Annual Paid leave
• Parental Leave
• Nursing Care Leave
• Special Paid Leave, etc.

■Required Qualifications
Shared belief in the mission and values of Mercari Group and its various companies
Experience handling the information security management tasks outlined in the Work Responsibilities section above
Basic knowledge of public clouds (Google Cloud, AWS, Microsoft Azure, etc.)
Strong communication skills to coordinate and build consensus with counterparts of varying skill levels and interests
Ability to find issues with the current situation, identify the root cause, and work to resolve it
Knowledge of basic IT infrastructure (TCP/IP, networks, servers, authentication, directory services, endpoint management)

■Preferred Qualifications
Ability to carry out business communication in English (conversational level or above preferred)
Internationally recognized information security certification, such as CISSP, CISM, or CISA
Experience working in information security management in an industry or company regulated by the Financial Services Agency
Knowledge of and experience operating systematized security frameworks such as FISC-based internal controls, ISO 27001, CIS Controls, or NIST SP 800-171
Experience with team management and project management
Basic knowledge of security management tools (SAST, DAST, EDR, CASB, etc.)
Knowledge of generative AI and LLM