Haken IT Security QA Specialist - GRC | Tokyo

Are you an experienced IT Security or Information Security professional looking to advance your career in Tokyo's technology sector?

A leading global technology company in Japan is seeking an IT Security QA Specialist to support information security governance, third-party risk assessments, and internal security compliance.

In this contract position, you will assess vendor security controls, identify potential information security risks, and help ensure business activities comply with internal security policies. You will also provide security guidance to internal stakeholders and contribute to ongoing governance, risk, and compliance (GRC) initiatives.

This opportunity is ideal for a bilingual IT security professional with experience in information security assessments, IT risk management, security compliance, or vendor risk assessments who wants to strengthen their expertise in an international technology environment.

Key Responsibilities

• Third-Party Security Assessments: Conduct information security assessments of external vendors and outsourced service providers using established security checklists and evaluation procedures.
• Security Controls & Compliance: Review existing security controls and evaluate compliance with internal information security policies, standards, and operational requirements.
• IT Risk Identification & Mitigation: Identify potential information security vulnerabilities and operational risks, assess their implications, and recommend appropriate improvements.
• Information Security Policy Support: Respond to internal inquiries regarding information security policies, security requirements, and compliance procedures.
• Stakeholder Security Advisory: Provide practical information security guidance to internal teams on business activities, IT projects, and operational initiatives.
• Security Governance & Risk Management: Support ongoing information security governance, risk assessment, and compliance activities across the organization.
• Cross-Functional Collaboration: Work with business and technology stakeholders to promote consistent security practices and strengthen organizational security awareness.

Required Skills and Qualifications

Experience:

• Minimum 3 years of professional experience in information security, IT security governance, IT risk management, or a related field.
• Experience participating in IT projects involving information security requirements, security controls, or compliance procedures.
• Sound understanding of information security policies, security risk assessments, and IT compliance processes.
• Ability to evaluate security controls, identify risks, and recommend practical improvements based on established security requirements.

Soft Skills:

• Strong analytical and problem-solving abilities to assess information security risks and recommend appropriate solutions.
• Excellent communication and stakeholder management skills, with the ability to explain security requirements to technical and non-technical colleagues.
• High attention to detail and accuracy when reviewing security controls and assessment findings.
• Ability to collaborate effectively with cross-functional business and technology teams.
• Proactive approach to identifying security concerns and supporting risk mitigation initiatives.
• Strong organizational and time management skills, with the ability to manage multiple assessments and stakeholder requests.

Language Requirements:

• Japanese: Native-level or equivalent fluent proficiency for internal stakeholder communication, security assessments, and policy discussions.
• English: Business-level proficiency, with a minimum TOEIC score of 700, for communication and collaboration in an international working environment.

Preferred Skills & Qualifications

• Experience in third-party risk management (TPRM), vendor security assessments, or outsourced service provider security reviews.
• Knowledge of ISO/IEC 27001 and Information Security Management Systems (ISMS).
• IPA Registered Information Security Specialist (SC) certification or equivalent information security expertise.
• Certified Cloud Security Professional (CCSP) certification or another relevant cloud security qualification.
• IPA Information Security Management (SG) or CompTIA Security+ certification.
• TOEIC score of 800 or above.
• Experience supporting security governance, risk, and compliance activities within a large enterprise or international technology organization.

About the Company

Our client is a leading global technology company with operations spanning e-commerce, financial services, telecommunications, and digital solutions.

With a strong presence in Japan and international markets, the organization operates in a dynamic technology environment where information security, risk management, and regulatory compliance are essential to supporting business operations.

The company places significant importance on maintaining effective information security controls, managing third-party risks, and promoting consistent security governance across its business activities.

This role offers an opportunity to gain experience in enterprise information security, IT security governance, and third-party risk management while collaborating with stakeholders across different business and technology functions.

Why You'll Love Working Here

• Global Technology Environment: Join a major international technology company with a strong presence in Japan and overseas markets.
• Enterprise-Level Security Experience: Gain practical exposure to information security governance, vendor security assessments, and third-party risk management.
• International Collaboration: Work in a multicultural environment with diverse business and technology stakeholders.
• Professional Development: Strengthen your knowledge of IT security, governance, risk management, and compliance (GRC) through hands-on responsibilities.
• Long-Term Contract Opportunity: Benefit from a long-term contract position with the potential for continued renewals.
• Work-Life Balance: Enjoy a structured Monday-to-Friday schedule, with weekends and public holidays off and minimal overtime.
• Casual Dress Code: Work in an environment that allows casual clothing.
• Career Growth in IT Security: Build valuable experience that can support future opportunities in information security, IT risk management, security governance, and compliance.

Don't Miss Out - Apply Now!