Information Security Officer

This role sits in the information-security function supporting WealthNavi’s robo-advisor and personal financial-services platform. It builds and operates security and privacy governance for financial services, using the Financial Services Agency’s guidance, CRI Profile and NIST SP 800 as reference frameworks. The work is connected to the company’s ISMS and ISO/IEC 27001 and 27017 certifications.

Responsibilities include gap analysis and maintenance of policies, standards, guidelines, manuals and guidebooks, including legal updates. The specialist improves risk-assessment and personal-information procedures such as data mapping and privacy-policy revisions, delivers security education and awareness content, handles internal consultations, and supports other departments and incident response. Applicants need experience in at least one relevant area: planning security initiatives, building security-management processes, creating security rules, security engineering in SOC, CSIRT, vulnerability assessment or security review, internal security consultation, or internal security education.