Senior IT Security GRC Analyst

The Senior IT Security GRC Analyst is responsible for governance, oversight, and lifecycle management of IT security risks across Olympus. The role identifies, assesses, prioritizes, tracks, escalates, and reports risks arising from systems, services, projects, and third parties.

Responsibilities include developing and maintaining IT security policies, standards, procedures, and the wider governance framework. The analyst designs, maps, and evaluates security controls, manages exceptions, and works with recognized frameworks including NIST and ISO. The role also conducts IT security risk assessments for third-party vendors and service providers and tracks remediation actions.

The position supports internal and external audits by preparing security documentation, analysis, and responses. It analyzes outputs from security tools and compliance technologies to identify risk trends and control effectiveness, and produces dashboards, KPIs, and management reports.

Required qualifications include at least five years of experience in IT security or GRC, a deep understanding of IT security frameworks and policies such as NIST and ISO 27001, experience with third-party or supply-chain risk assessment and audit support, and hands-on experience with cybersecurity or GRC platforms such as SIEM and GRC tools. Business-level Japanese equivalent to JLPT N1 or above and business-level English equivalent to TOEIC 800 or above are required. Experience in auditing, consulting, internal audit, or IT security departments of large corporations is preferred, as are CISA, CISSP, or ISO 27001 Lead Auditor certifications.

The position is based at Olympus headquarters in Hachioji, Tokyo. Telework may be available depending on circumstances.