Interprets PCI DSS requirements, reviews system and cloud-service security designs, defines project controls, assesses risk, and supports incident response and security governance.
About this role
This role sits within PayPay Card’s Cybersecurity headquarters, specifically the CIA Promotion Department. The team develops security rules and advances security measures based on ISMS and ISO 27001, while also supporting business continuity planning. The position connects security governance with product and system development rather than treating security as a release barrier.
Responsibilities include reviewing security designs for system development, assessing risks for SaaS and cloud-service adoption, defining security requirements with project teams, maintaining ISMS-based policies and operations, evaluating outsourcing risks, and coordinating incident response and recurrence prevention. The role also involves improving evaluation methods and operating processes in collaboration with engineers.
Applicants need at least three years of experience in system development or infrastructure construction, experience creating and maintaining information-security rules, and practical ISMS or ISO 27001 experience. Applicants also need the ability to build agreement among diverse stakeholders and to lead initiatives from issue discovery through planning and execution.
This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.