Security Specialist

Money Forward is hiring a Security Specialist for governance at the new digital bank it is establishing with Sumitomo Mitsui Financial Group and Sumitomo Mitsui Banking Corporation. The role designs, builds and runs controls for security and personal data protection in a bank being created from nothing.

Duties include building and operating information security controls using frameworks such as NIST CSF and CIS Controls, giving in-house consulting to business units on security and data protection, helping answer security questions from corporate customers, and obtaining third-party certifications such as SOC reports and ISMS. The person has a say in the upstream roadmap and in how the controls are set up.

Applicants need a basic understanding of networks, cloud, programming languages and security solutions, plus knowledge or experience in at least one of these: building and running internal information systems, building systems on AWS or GCP, personal information protection and data protection practice, frameworks such as NIST SP800, PCI, FISC and ISMAP, ISO 27000 and ISMS certification, or SOC report work. Business-level Japanese (JLPT N1 or equivalent) is required. Financial-sector experience and CISSP or CISA-type certifications are preferred.