Senior SecOps and GRC Professional

About SmartNews

SmartNews is a leading global information and news discovery company dedicated to delivering quality information to the people who need it. Thanks to our unique machine-learning technology and relationships with more than 3,000 global publisher partners, we provide news that matters to millions of users.

Founded in 2012 in Tokyo, SmartNews also has offices in Osaka (Kansai Office), Palo Alto, New York and Singapore.

If you share our vision and are passionate about our mission, we encourage you to apply!

The Security team at SmartNews protects and strengthens the company's overall security posture, working proactively rather than reactively across both our product and our corporate environment. On the Security Operations side, the team monitors systems continuously, detects and investigates threats, and manages security incidents and vulnerabilities through to resolution. On the Governance, Risk, and Compliance side, the team sets the standards and policies that guide how

SmartNews handles security, and ensures we meet our obligations under applicable legal and industry requirements. Rather than operating as a separate gatekeeping function, the team embeds security practices directly into product development and day-to-day business operations, so that protecting our users, our data, and our platform is a shared discipline across the organization.

SmartNewsのセキュリティチームは、受動的な対応ではなく能動的な取り組みを通じて、プロダクトとコーポレート環境の双方にわたり、全社的なセキュリティ体制の保護と強化を担っています。セキュリティオペレーションの領域では、システムを常時モニタリングし、脅威の検知と調査を行い、セキュリティインシデントや脆弱性を解決に至るまで一貫して管理します。ガバナンス・リスク・コンプライアンス（GRC）の領域では、SmartNewsにおけるセキュリティ対応の指針となる基準やポリシーを策定し、適用される法令および業界標準上の要件を確実に満たせるようにしています。また、当チームは独立したゲートキーパーとして機能するのではなく、プロダクト開発や日々の事業運営そのものにセキュリティのプラクティスを組み込むことで、ユーザー・データ・プラットフォームの保護を組織全体で共有される規律として根付かせています。

• Build and evolve Detection & Response capabilities across SmartNews infrastructure and products with a focus on detection and operational response.
• Automate response and investigations by building workflows that reduce toil (triage, enrichment, containment, evidence capture) and improve time-to-understand/time-to-contain.
• Evaluate and respond to emergent security concerns in a lab environment, such as detection and response strategies for agents operating across infrastructure at scale.
• Identify gaps in security controls, develop remediation strategies, and coordinate vulnerability management and patching across IT, and cloud systems.
• Perform comprehensive security and risk assessments across infrastructure, AI implementations, and global governance frameworks.
• Overhaul and streamline our ISMS policies, converting rigid legacy frameworks into clear, workable workflows for modern engineering and business operations.
• Manage security inquiries, partner audits, and compliance obligations (including JSOX and enterprise deal requirements) in collaboration with key business stakeholders.