Corporate IT & Information Security Specialist

This is Nalalys’s first dedicated corporate IT role. The position is responsible for planning and executing the company’s internal IT strategy and security foundation with substantial autonomy. Nalalys is an AI startup developing services that address business misconduct and compliance risks. Its products analyze raw communication data such as email and chat to detect signs of fraud, harassment, and information leakage, and use an AI chatbot to collect and structure reports using the five Ws and one H.

The role will establish and operate security policies and guidelines, maintain internal rules and security documentation, and introduce, operate, and manage security solutions including IAM, SWG, EDR, and MDM. It will lead the maintenance and renewal of ISMS and P-Mark certifications and respond to security check sheets from customers.

Internal IT asset and account responsibilities include administering Microsoft 365, managing software licenses, and handling PCs and peripheral equipment from procurement through allocation and disposal. The position will also support employee joining and leaving procedures, organizational changes, and the internal help desk.

Further work includes automating and improving onboarding, offboarding, and device setup; evaluating and supporting the introduction of groupware, customer management systems, and other business tools; and creating a company-wide roadmap and strategy for business transformation using generative AI. The posting does not specify an education requirement, a years-of-experience threshold, or a language requirement.

The work style uses either a full flextime system or a discretionary labor system. Both remote work and office work are available. The designated office is in Shinagawa, Tokyo, near Shinagawa Station, with a satellite office in Otemachi. Because the team also meets in person, remote workers are generally expected to live in Tokyo or one of the three surrounding prefectures, or be willing to relocate. The possible work location includes company-designated locations, including places where remote work is performed.

Annual paid leave is two days above the statutory amount, and welcome leave can be used for the first six months after joining. Side jobs are permitted when they do not interfere with the primary job and after prior application to the company. Claude Code, Cursor, Google Gemini, and Microsoft Copilot are available as standard tools for all employees. The selection process consists of document screening, two or three online interviews, reference interviews with two former colleagues, and a final interview at the head office.