Job Description:

Business Overview

The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.

Department Overview

The Information Security & Privacy Governance Department (ISPD) enables and accelerates business growth by establishing, maintaining, and enhancing robust information security, privacy, data, and AI governance frameworks across the Rakuten Group. We ensure Rakuten's global operations are secure, compliant, and innovative by adhering to regulatory requirements, providing comprehensive employee training, strategically managing data assets, and governing AI responsibly.

Position:

Why We Hire

This position is dedicated to strengthening Information Security Governance for Rakuten Group's mobile business and will be concurrently assigned to Rakuten Mobile, Inc. and Rakuten Total Solutions, Inc. to lead their Information Security initiatives.

Working at the intersection of Group-wide Information Security Governance and telecommunications industry-specific regulatory and business requirements, this role serves as a bridge between executive leadership, business organizations, and Rakuten Group headquarters. The successful candidate will provide Information Security advisory services and governance support to executive management teams at Rakuten Mobile, Inc. and Rakuten Total Solutions, Inc.

・ Development and operation of information handling and remote work policies aligned with Rakuten Group standards

・ Development and operation of company-specific security policies, including retail store security and dealer/agency security assessment requirements

・ Management of Information Security inquiry and consultation services

・ Support for Information Security incident response and remediation activities

・ Delivery of employee Information Security awareness and training programs

・ Reporting the status of Information Security initiatives and controls to executive management of Rakuten Mobile and Rakuten Total Solutions

Position Details

・Develop information security strategies and formulate roadmaps aligned with the business objectives of Rakuten Mobile, Inc. and Rakuten Total Solutions, Inc.
・Manage KPIs and KRIs, drive continuous improvement initiatives, and oversee resource planning and budget management
・Provide guidance on the development of various internal policies and regulations, collaborate with Rakuten Group headquarters functions, and review responses to inquiries
・Support the General Manager in preparing and responding to reports for executive management
・Support the implementation of information security initiatives across business divisions of Rakuten Mobile, Inc. and Rakuten Total Solutions, Inc.
・Develop, evaluate, and manage group members, including goal setting and performance management, as well as prioritization of operational tasks

Concurrently serve as Vice Department Manager of the Information Security Promotion Department at Rakuten Mobile, Inc. and Rakuten Total Solutions, Inc.

Mandatory Qualifications:

・ Minimum 7 years of experience in Information Security, IT Governance, or Technology Risk Management

・ Experience planning and implementing Information Security programs and initiatives

・ Experience presenting to executive management and leading cross-functional projects involving multiple organizations

・ Proven ability to collaborate effectively with diverse teams and stakeholders

・ Hands-on experience managing and responding to Information Security incidents

Desired Qualifications:

・ Experience interpreting industry-specific regulatory requirements (e.g., financial services, telecommunications) and implementing related security controls

・ Experience planning and operating employee Information Security awareness programs

・ Professional certifications such as CISSP or Registered Information Security Specialist (RISS)

・ Experience implementing Information Security frameworks and standards such as ISO/IEC 27001, NIST Cybersecurity Framework (NIST CSF), PCI-DSS

・ Security certifications from major cloud providers, including AWS, GCP, Microsoft Azure

#business #informationsecurity #privacygovernance #technologymanagementdiv

Languages: