- Design, implement, and maintain robust cybersecurity frameworks aligned with PCI DSS, Group security policies and global standards.
- Monitor, analyze, and respond to security incidents, threat analysis and vulnerabilities across networks, applications, and endpoints.
- Lead penetration testing, threat modeling, & risk assessments to identify and mitigate potential risks.
- Develop and enhance SIEM, EDR, and SOC monitoring capabilities to ensure real-time threat detection and response.
- Collaborate with IT infrastructure, application, and compliance teams to ensure security-by-design across all projects.
- Conduct regular audits & ensure compliance with Japanese regulatory requirements and international best practices.
- Research and evaluate emerging cyber threats, technologies, and regulatory trends, recommending proactive measures.
- Conduct security awareness training and technical mentoring for internal teams.
- PCI DSS、グループセキュリティポリシー、およびグローバルスタンダードに準拠した堅牢なサイバーセキュリティフレームワークを設計、実装、保守をする。
- ネットワーク、アプリケーション、エンドポイント全体にわたるセキュリティインシデント、脅威分析、脆弱性を監視、分析、および対応する。
- 潜在的なリスクを特定し、軽減するために、侵入テスト、脅威モデリング、およびリスク評価を主導する。
- リアルタイムの脅威検知と対応を確実にするために、SIEM、EDR、およびSOC監視機能を開発・強化する。
- すべてのプロジェクトにおいてセキュリティバイデザインを確実に実施するために、ITインフラストラクチャ、アプリケーション、およびコンプライアンスチームと連携する。
- 定期的な監査を実施し、日本の規制要件および国際的なベストプラクティスへの準拠を確保する。
- 新たなサイバー脅威、テクノロジー、および規制動向を調査・評価し、プロアクティブな対策を推奨する。
- 社内チーム向けにセキュリティ意識向上トレーニングと技術指導を実施する。
Requirements
- Bachelor’s or Master’s degree in computer science, Information Technology, Cybersecurity, or related field.
- Minimum 7+ years of experience in cybersecurity or IT security roles, preferably in financial services or credit card industry.
- Strong knowledge of network & application security, cryptography, secure coding practices, & cloud security.
- Hands-on experience with SIEM tools, Vulnerability scanners, and Incident response platforms.
- Experience with Japanese regulatory frameworks and data protection laws is a plus.
- Professional certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.
- Fluent in Japanese and basic level English reading, writing and communication, bi-lingual Japanese native is preferred but not mandatory.
- Knowledge of Japanese regulatory frameworks (FSA, FISC guidelines, PCI DSS).
- Experience supporting audit and compliance processes for financial institutions.
- Ability to communicate technical issues effectively with non-technical stakeholders.
- Working proficiency in Japanese; English language skills are an advantage.
- Strong analytical and problem-solving mindset.
- High integrity, confidentiality, and accountability in handling sensitive information.
- Collaborative approach with ability to work across multicultural teams.
- Proactive learner with a continuous improvement attitude.
- コンピュータサイエンス、情報技術、サイバーセキュリティ、または関連分野の学士号または修士号。
- サイバーセキュリティまたはITセキュリティ関連業務で7年以上の経験。（金融サービスまたはクレジットカード業界が望ましい）
- ネットワークおよびアプリケーションセキュリティ、暗号化、セキュアコーディングプラクティス、クラウドセキュリティに関する深い知識。
- SIEMツール、脆弱性スキャナー、インシデント対応プラットフォームの実務経験。
- 日本の規制枠組みおよびデータ保護法に関する経験があれば尚可。
- CISSP、CISM、CEHなどの専門資格、または同等の資格があれば尚可。
- 日本語に堪能で、英語の読み書きとコミュニケーション能力が初級レベル。バイリンガルの日本語ネイティブが望ましいですが、必須ではありません。
- 日本の規制枠組み（FSA、FISCガイドライン、PCI DSS）に関する知識。
- 金融機関の監査およびコンプライアンスプロセスのサポート経験。
- 技術系以外のステークホルダーと技術的な問題を効果的にコミュニケーションできる能力。
- 日本語での実務能力。英語スキルがあれば尚可。
- 分析力と問題解決能力に優れている。
- 機密情報を取り扱う際に、高い誠実性、機密保持能力、そして説明責任を果たせる能力。
- 多文化チームで協働できる協調性。
- 継続的な改善姿勢を持ち、積極的に学習できる能力。
Skills Required
- Bachelor’s or master’s degree in computer science, information technology, cybersecurity, or a related field
- At least 7 years of experience in cybersecurity or IT security
- Strong knowledge of network and application security, cryptography, secure coding practices, and cloud security
- Hands-on experience with SIEM tools, vulnerability scanners, and incident response platforms
- Knowledge of Japanese regulatory frameworks, including FSA, FISC guidelines, and PCI DSS
- Experience supporting audit and compliance processes for financial institutions
- Fluent Japanese and basic English reading, writing, and communication skills
- Experience in financial services or the credit card industry
- Experience with Japanese regulatory frameworks and data protection laws
- CISSP, CISM, CEH, or equivalent professional certification
- Native Japanese bilingual proficiency
- Additional English language proficiency
What We Do
Nucleus Software is the leading provider of lending and transaction banking solutions to the global financial services industry. Its software powers the operations of more than 200 financial institutions in 50 countries, supporting retail banking, corporate banking, cash management, internet banking, automotive finance & other business areas. FinnOne Neo™ - End-to-End Loan Lifecycle Management A comprehensive product suite built to digitize the lending operations of the global banking and financial services industry. FinnOne Neo is an agile and customer-centric platform capable of servicing the entire loan cycle. Nucleus Software’s FinnOne has been the 10 time winner World's Best Selling Lending Software. Nucleus Software's Lending Mobility Solutions enable the user to perform paperless data sourcing, revert back with application statuses, submit field investigation responses, collect upfront payments and compute repayment related calculations. The applications are based on robust platform with effective integration of security and technological aspects to cater to stringent requirements of financial institutions. Nucleus Software’s FinnAxia is a comprehensive cash management solution that caters to Global Receivables, Global Payment, Global Liquidity , e-Financial supply chain management and Business Internet Banking providing flexible, speedy & efficient execution of cash management processes. The web-enabled solution provides a competitive edge to banks and financial institutions with its seamlessly integrated modules. Acting as a powerhouse, Nucleus Software’s FinnAxia offers scalable and flexible banking solutions designed to address the dynamic business needs of the banks customers. Nucleus Software also offers solutions to customers in the areas of Managed Infrastructure services and Application Development & Maintenance.
