Security Risk Analyst

As part of Sony Interactive Entertainment's (PlayStation) Information Security Tokyo Office, you manage and improve organization-wide information-security risk and raise security awareness, working from Japan within a global team alongside IT and security teams in the US, Europe and Asia. Work: review, triage, risk-assess and respond to security requests from technical, engineering and business divisions; perform/support vendor security assessments (due diligence), organize risks and advise on response given business impact and contract requirements; communicate risks to stakeholders and translate mitigation into concrete actions with technical/related teams and management; identify and support security requirements for PlayStation and studio business projects; and assess security for critical systems and priority areas — across everything from large platforms to small systems. The Information Security Tokyo Office (~20 members as of April 2026) is a diverse, global team. Required: 4+ years of relevant information-security experience (guideline development/optimization, IT risk analysis and improvement planning, or security-requirement definition/design/implementation with system teams); autonomously leading requests to residual-risk assessment; a technical background covering cloud infrastructure, SaaS and new technology; and the ability to communicate technical content and escalate residual risk to management. Preferred: security-engineer experience, project management, cloud risk management, certifications (CISSP/CISA/CISM), compliance knowledge (PCI DSS, NIST, GDPR, ISO27001). Language: native-level Japanese and English (TOEIC 800+ desirable) for global collaboration. Full-time, based in Koto-ku, Tokyo.