Staff Security Compliance Analyst
Security compliance analyst on Okta's Security Compliance team in Tokyo, driving ISMAP, SOC 2, and ISO 27001 compliance: designing, documenting, testing, and monitoring security controls with process owners and demonstrating them to external auditors. Requires 5-7+ years in GRC and fluency in English and Japanese.
- Compensation
- Not disclosed
- Location
- Tokyo, Japan
- Work setup
- Not specified
- Seniority
- Staff
- Employment
- Not specified
- Experience
- 7+ years
- Category
- Legal
- Posted
Skills
Must have
- 5-7+ years of experience in Information Technology or similar
- Comprehensive understanding of IT Security practices and the GRC lifecycle
- Fluent in English and Japanese
- Experience at ISMAP compliant organization(s), or performing ISMAP assessments
- Participation in a mature ISMS program and delivery of ISMAP compliance
- Familiarity with Japanese cybersecurity laws and regulations
- Knowledge of IT security frameworks such as NIST publications, FedRAMP, ISO 27001, CCM, IRAP Protected, ISMAP, BSI-C5, TISAX, SOX, HIPAA, ENS, HDS, and SOC2 Trust Principles and Criteria
- Understanding of IT methodologies, such as software development lifecycle and operations
- Strong analytical and problem-solving skills
- Strong oral, written and presentation communication skills
- Able to work independently or with a team
- Bachelor's degree or higher in Computer Science, Management Information Systems or Accounting, or equivalent experience
Nice to have
- Experience in a Security Governance, Risk, or Compliance (GRC) focused role
- Hands-on technical implementation of ISMAP, SOC2 and ISO controls in a cloud-based environment
- Experience with tools such as Salesforce, Okta, ServiceNow, and JIRA
Full description
**Secure Every Identity, from AI to Human
**Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence.
This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk.
The Security Compliance team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution through a security-first approach to compliance. We are looking for someone with a strong compliance background and experience in the technical implementation of security controls from ISMAP, IRAP Protected, SOC2, ISO 27001, and other international frameworks. The right candidate will have participated in a mature ISMS program, delivered ISMAP compliance, and will play a key role in providing customers with confidence in Okta’s leadership in the identity space. As a Staff Security Compliance Analyst, you will support security initiatives by engaging various process owners in the design, documentation, implementation, monitoring of the appropriate controls in our computing environments, and demonstrating those controls to external auditors. In addition you will plan and lead the private sector compliance initiatives.
The ideal candidate will have hands-on experience with the technical implementation of ISMAP, SOC2 and ISO controls in a cloud-based environment using tools such as Salesforce, Okta, ServiceNow, JIRA and others. This position requires a unique set of skills including project management, and an eye towards future standards and regulations that will impact our customers. If you’re a self-starter who wants to make a difference in global cloud security, we want you on board.
Job Duties and Responsibilities:
- Participate in Security Compliance Assessments of the company’s computing environment, with focus on security controls
- Facilitate Okta’s ISMAP compliance assessment
- Interpret requirements across multiple compliance frameworks
- Collaborate to manage and maintain common controls framework for Okta
- Scheduling compliance walkthroughs
- Ensuring consistent operations and communications across compliance teams
- Ensuring visibility into key compliance projects through reporting and metrics
- Analyze gaps between current status and future compliance framework needs
- Perform controls testing and develop recommendations based on confirmed observations