ICT Security Strategy & Planning Specialist

Role Overview • Drive enterprise-wide and group security initiatives, maintaining and strengthening them through PDCA cycles • Develop and deploy information security policies/standards, plan and execute security strategies • Design and implement employee training programs (planning, execution, and effectiveness analysis) • Respond to security consultations from business units, and coordinate with key departments to drive cross- security governance and initiatives. Required Skills & Experience • Japanese (business) and English (business) to communicate with HQ in Japan • 5+ years of experience in information security planning and strategy development • Experience with ISMS (Information Security Management System) and/or ISO 27001certification acquisition and operations • Experience conducting gap analysis using NIST CSF and/or CIS Controls • Hands-on experience with security risk assessment, management, and incident response • Experience handling information security regulations (e.g., Personal Information Protection Act, GDPR) • Experience leading cross-functional projects • Experience planning and conducting security awareness and training programs for executives and operational staff • Basic knowledge and operational experience with IT infrastructure (network, cloud, servers, etc.) • Information security certifications (CISSP, CISM, Registered Information Security Specialist, etc.) Preferred Skills & Experience • Experience developing internal policies and guidelines • 3+ years of system operation and deployment experience • 3+ years of information security-related work experience Soft Skills • Ability to explain and persuade based on the audience's perspective and knowledge level • Proactive attitude and self-starter mindset • Strong collaboration skills with ability to coordinate and build consensus across departments