Description
The Trust and Compliance team at Cisco is responsible for ensuring that our portfolio meets the cybersecurity compliance and certification standards required for global market access, while simultaneously providing robust security assurances to our customers.
We are seeking a strategic leader to manage the internal and external compliance posture of our organization. You will play a critical role in driving the compliance strategy for our Cloud offerings in Japan, specifically supporting a rapidly expanding ISMAP (Information System Security Management and Assessment Program) portfolio.
Key Responsibilities:
- Contribute under the supervision of the Global Cloud Compliance Strategy Leader to drive technology compliance activities across product offerings.
- Serve as a Subject Matter Expert (SME) for ISMAP, providing guidance to cross-functional teams.
- Conduct information security assessments across critical domains, including User Access Management, Network/OS/Application Security, Vulnerability Management, Encryption, SDLC, Backup/Disaster Recovery, and Physical Security.
- Draft compliance reports summarizing objectives and key findings, and collaborate with relevant teams to remediate identified gaps.
- Lead engagement with external auditors and customers to provide assurance regarding our Cloud programs.
- Assist in compliance testing; identify internal control issues, ensure they are clearly defined, and perform thorough root cause analyses.
- Develop, automate, and maintain audit and compliance tasks within GRC and other related platforms.
- Build and maintain compliance dashboards to provide a holistic view of the organization’s compliance posture.
- Collaborate and coordinate compliance activities with global Cloud teams.
Minimum Qualifications:
- Bachelor’s or Master’s degree in Information Technology, Computer Science, or a related field.
- Minimum of 3 years of experience in cybersecurity regulatory compliance.
- In-depth knowledge of the ISMAP framework.
- Fluent in Japanese and business-professional proficiency in English.
- Hands-on experience with AWS and other cloud environments.
- Strong interpersonal, verbal, and written communication skills; demonstrated ability to work effectively as a team player with excellent organizational and planning capabilities.
Preferred Qualifications:
- Professional certifications such as CISA, CISSP, or CCSK are highly preferred.
- Strong understanding of common IT systems (OS, network devices, applications) and core processes (SDLC, IAM, Vulnerability Management, Backup, and DR).
- Proven ability to bridge the gap between business objectives and technical requirements when communicating with management.
- Strong analytical problem-solving skills with the ability to manage multiple priorities effectively.