English summary for screening — check the original posting before applying.
This role focuses on promoting company-wide information security, acting as a second line of defense to ensure safe and stable business operations. Initially focused on information security, responsibilities are expected to expand to include overall governance, risk management, and compliance promotion.
Must-haves
- Experience in information security
- Experience in establishing and improving information security systems
- Experience in acquiring and maintaining certifications like ISMS (ISO/IEC 27001) and Privacy Mark
- Experience in developing and revising information security policies and regulations
- Experience in security reviews and third-party risk assessments
- Experience in responding to information security incidents
- Experience in planning and executing security education and awareness activities
- Experience in reporting on information security and risk status to management
Nice-to-haves
- Experience in company-wide risk management systems
- Experience in compliance systems
- Experience in crisis management systems, including BCP/BCM
- Experience in governance and internal controls