City
Business & corporate roles in Tokyo scored for foreign professionals — visa sponsorship, Japanese level, salary and fit. Create a matching profile to personalize the ranking.
Business & corporate roles in Tokyo scored for foreign professionals — visa sponsorship, Japanese level, salary and fit. Create a matching profile to personalize the ranking.
After sending, check your email and click the link
City
Manage security and privacy governance by reviewing SaaS, AI and data-use risks; operating ISMS/PMS processes; and standardizing controls, customer reviews and incident response.
This role supports information-security and privacy governance by making recurring decisions, reviews, and operational work reproducible. The hire will work on one of several areas: privacy management system (PMS) operations, security-governance operations, GRC and third-party assurance, or business-security partnership for new initiatives, AI, and data use. People management is not a prerequisite.
Responsibilities include reviewing security and privacy considerations for SaaS, cloud services, generative AI, new businesses, and initiatives; organizing issues concerning the collection, use, sharing, outsourcing, cross-border transfer, retention, and deletion of personal information; and responding to internal consultations and customer security assessments. The role also supports ISMS and PMS annual activities, training, registers, supplier evaluations, inspections, audits, external assessments, and maintenance of policies, standards, FAQs, application forms, and evidence.
The position performs initial assessment and response support for information-security and personal-information incidents escalated by the risk and accident management group. It documents and improves procedures, standard answers, decision criteria, templates, and knowledge; improves lead times through standardization, automation, and self-service; and uses generative AI safely for research, issue analysis, document preparation, and knowledge retrieval. For high-risk matters, the role organizes facts, risks, options, and recommendations to support authorized decision makers.
Candidates need practical experience in either information security, such as risk assessment, ISMS operation, security consultation, SaaS review, or incident response, or privacy work, such as PMS operation, personal-information applications and consultations, policy or register management, or privacy assessment. Required capabilities include completing assigned work by deadlines while coordinating with stakeholders; using Google Workspace, Slack, Notion, or similar SaaS tools; understanding basic IT, cloud, and SaaS concepts; verifying generative-AI output; and escalating appropriately in unstructured situations.
Relevant experience includes privacy governance, security governance, GRC, audits, third-party assurance, customer security reviews, and business or product security consultation. Preferred knowledge includes NIST CSF, CIS Controls, ISO/IEC 27001 and 27701, public cloud, web applications, networks, identity management, and credentials such as Registered Information Security Specialist, CISSP, CISM, CISA, or personal-information certification.
The role is based at Timee's Tokyo headquarters in Minato-ku, with office attendance in principle three days per week. It is a full-time position with a three-month probation period. Annual salary is JPY 6.0 million to JPY 10.0 million, including bonuses paid twice yearly; bonus amounts vary with individual performance, prior salary is considered, and compensation is reviewed twice yearly. Working hours use a flextime system with core hours of 11:00–15:30 and standard hours of 09:30–18:30. The position has 120 annual holidays, a full two-day weekend, paid leave and other listed leave programs, social insurance, commuting reimbursement up to JPY 50,000 per month, and employee support programs including share ownership, lunch, team-building, books, and seminars.
Job details
About Timee
Timee operates a leading Japanese spot-work app that instantly matches workers with short-term, on-demand jobs with no interview required.
All Timee jobs & company profile →Company details
AI-generated overview — may be incomplete or wrong, so don't rely on it fully.
This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.