# Staff Info Security Engineer

**Company**: Okta
**Location**: Tokyo, Japan
**Work arrangement**: hybrid
**Experience**: staff
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/okta/jobs/8333434?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_8b4f6440-50a

## Description

We are seeking a Staff Security Compliance Analyst to join our Security Compliance team. The successful candidate will have a strong compliance background and experience in the technical implementation of security controls from ISMAP, IRAP Protected, SOC2, ISO 27001, and other international frameworks.

Responsibilities:

- Participate in Security Compliance Assessments of the company’s computing environment, with focus on security controls

- Facilitate Okta’s ISMAP compliance assessment

- Interpret requirements across multiple compliance frameworks

- Collaborate to manage and maintain common controls framework for Okta

- Schedule compliance walkthroughs

- Ensure consistent operations and communications across compliance teams

- Ensure visibility into key compliance projects through reporting and metrics

- Analyse gaps between current status and future compliance framework needs

- Perform controls testing and develop recommendations based on confirmed observations

- Work with process and control owners to help them understand the audit results, identify remediation options, and prioritise their closure

- Develop appropriate security documentation, including system security plans, information security policies, and risk assessment procedures

- Assess security impact on changes to the systems and applications

- Identify opportunities for improvement within the Compliance program and build plans to address them

Requirements:

- 5-7+ years of experience in Information Technology or similar, preferably in a Security Governance, Risk, or Compliance (GRC) focused role

- Comprehensive understanding of IT Security practices and the Governance, Risk, and Compliance lifecycle

- Fluent in English and Japanese

- Experience at ISMAP compliant organisation(s), or performing ISMAP assessments

- Familiarity with Japanese cybersecurity laws and regulations

- Knowledge in IT security frameworks and best practices, such as NIST publications, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC2 Trust Principles and Criteria

- Understanding of IT methodologies, such as software development lifecycle and operations

- Strong analytical and problem-solving skills and the ability to “think-out-of-the-box”

- Strong oral, written and presentation communication skills

- Able to work independently or with a team

- Bachelor’s degree or higher in Computer Science, Management Information Systems or Accounting, or equivalent experience

## Skills

### Required
- ISMAP
- SOC2
- ISO 27001
- Japanese
- English
- IT Security
- Governance
- Risk
- Compliance
- NIST
- FedRAMP
- CCM
- IRAP Protected
- BSI-C5
- TISAX
- SOX
- HIPAA
- ENS
- HDS

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/okta/jobs/8333434?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)