Information Security Specialist - International Standard & System Section, Information Security & Privacy Governance Department (ISPD)

Job Description:Business Overview

The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.

Department Overview

The Information Security & Privacy Governance Department (ISPD) enables and accelerates business growth by establishing, maintaining, and enhancing robust information security, privacy, data, and AI governance frameworks across the Rakuten Group. We ensure Rakuten's global operations are secure, compliant, and innovative by adhering to regulatory requirements, providing comprehensive employee training, strategically managing data assets, and governing AI responsibly

Our group ensures the security of the partners and external services that support the Rakuten ecosystem.

Our core mission is to manage external risks through rigorous security assessments and audits, enabling the business to grow safely. We also serve as a security partner for internal teams, solving challenges and streamlining processes to elevate security standards across the group.

As a vital line of defense for Rakuten, we work closely with internal stakeholders to build a secure and reliable environment for our global business.

Position:Position Details

・ Security assessment and regular audits of third-party companies such as business partners and external cloud services

・ Identifying and improving issues in third-party management

・ Responding to inquiries regarding information security and IT security

・ Responding to various security-related applications and process improvements

Mandatory Qualifications:

・ 3 or more years of experience in information security-related work, or experience in projects that include IT or information security elements

・ Experience in planning, developing, operating, auditing information systems

・ Proactive attitude and strong sense of ownership

・ Ability to communicate technical concepts to non-technical audiences

Desired Qualifications:

・ Passing the Registered Information Security Specialist Exam (IPA SC) or equivalent knowledge

・ Passing the CISSP exam or equivalent knowledge

・ Passing the CCSP exam, the cloud service vendor certification exam or equivalent knowledge