Description
We are seeking a Staff Security Compliance Analyst to join our Security Compliance team. The successful candidate will have a strong compliance background and experience in the technical implementation of security controls from ISMAP, IRAP Protected, SOC2, ISO 27001, and other international frameworks.
Responsibilities:
- Participate in Security Compliance Assessments of the company’s computing environment, with focus on security controls
- Facilitate Okta’s ISMAP compliance assessment
- Interpret requirements across multiple compliance frameworks
- Collaborate to manage and maintain common controls framework for Okta
- Schedule compliance walkthroughs
- Ensure consistent operations and communications across compliance teams
- Ensure visibility into key compliance projects through reporting and metrics
- Analyse gaps between current status and future compliance framework needs
- Perform controls testing and develop recommendations based on confirmed observations
- Work with process and control owners to help them understand the audit results, identify remediation options, and prioritise their closure
- Develop appropriate security documentation, including system security plans, information security policies, and risk assessment procedures
- Assess security impact on changes to the systems and applications
- Identify opportunities for improvement within the Compliance program and build plans to address them
Requirements:
- 5-7+ years of experience in Information Technology or similar, preferably in a Security Governance, Risk, or Compliance (GRC) focused role
- Comprehensive understanding of IT Security practices and the Governance, Risk, and Compliance lifecycle
- Fluent in English and Japanese
- Experience at ISMAP compliant organisation(s), or performing ISMAP assessments
- Familiarity with Japanese cybersecurity laws and regulations
- Knowledge in IT security frameworks and best practices, such as NIST publications, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC2 Trust Principles and Criteria
- Understanding of IT methodologies, such as software development lifecycle and operations
- Strong analytical and problem-solving skills and the ability to “think-out-of-the-box”
- Strong oral, written and presentation communication skills
- Able to work independently or with a team
- Bachelor’s degree or higher in Computer Science, Management Information Systems or Accounting, or equivalent experience