Carry out IT and system audits of AEON Financial Service and its subsidiaries in Japan and abroad, covering cybersecurity, information security and system development, with overseas audit trips.
About this role
A role in the system operations department responsible for system risk management and PCI DSS compliance across AEON Card, AEON Pay and other payment services and internal systems.
The work runs from risk assessment of new services and system changes to checking PCI DSS requirements, audits and assessments, remediation, monitoring and reporting to management. It includes PCI DSS scoping and gap analysis; coordinating with QSAs, card brands and vendors; security reviews of releases and cloud adoption; checking access control, logging, segmentation and encryption in the cardholder data environment; following up on vulnerability scans and penetration tests; and third-party risk. Environments span AWS, Azure, Google Cloud and on-premises.
Required: about three years in system risk, information security, system audit or IT controls at a card, payment or financial company, or PCI DSS or security audit work at a vendor or consultancy; basic knowledge of development, infrastructure and security; and coordination and documentation skills.
This is an AI-generated summary of the employer's original posting — details can be incomplete, out of date or simply wrong. Always confirm everything on the official posting before applying.