The Role
Supports ISMAP security assessments, IT audits, ITGC and ITAC evaluations, evidence collection, audit documentation, remediation tracking, risk assessments, and continuous compliance monitoring. Coordinates with Japanese and global stakeholders across security, engineering, compliance, legal, risk, and business teams. Facilitates bilingual control walkthroughs and audit discussions, manages workstreams and dependencies, and evaluates controls covering SDLC, identity and access management, disaster recovery, vulnerability management, cloud services, and change management.
Summary Generated by Built In
We are looking for a Bilingual Cyber Security & Technology Risk Consultant in Japan for a leading global technology organization. The role is primarily focused on IT audit, ISMAP security assessments, IT control evaluations, audit documentation, evidence management, remediation support, continuous compliance monitoring, and stakeholder coordination across Japanese and global teams.
Work Style: Hybrid
Work Place: Tokyo, Japan
Key Responsibilities:
- Support multiple ISMAP security assessment and audit cycles, including planning, control assessment, walkthroughs, evidence collection, documentation, and follow-up activities.
- Assess and document IT General Controls (ITGC), IT Application Controls (ITAC), and other internal security and technology controls.
- Manage audit evidence requests, trackers, control narratives, risk and issue logs, remediation actions, and audit-ready documentation.
- Coordinate with engineering, information security, compliance, legal, risk, and business stakeholders in Japan and globally.
- Facilitate control walkthroughs, status meetings, and audit discussions in both Japanese and English.
- Support IT governance, security compliance, IT risk assessments, and continuous compliance monitoring.
- Lead assigned workstreams, manage priorities and dependencies, and provide clear status reporting to project stakeholders.
- Contribute to the evaluation of controls related to SDLC, identity and access management, disaster recovery, vulnerability management, cloud services, and change management.
Requirements
Required Qualifications:
- Bilingual communication capability: business-level Japanese and business-level English.
- Solid professional experience in IT Audit, IT Governance, Security Compliance, Technology Risk, or related control-assurance work within highly regulated environments.
- Experience supporting security assessments and IT control evaluations, with a strong understanding of audit methodologies, internal controls, and evidence requirements.
- Hands-on experience with ISMAP assessments or closely related security-control frameworks and certification programs.
- Working knowledge of ITGC, ITAC, IT risk assessment, internal controls, security governance, and compliance documentation.
- Ability to facilitate discussions and walkthroughs in English with global engineering and compliance teams, and to coordinate effectively with Japanese stakeholders.
- Proven ability to lead assigned workstreams, manage multiple priorities, and coordinate cross-functional stakeholders in fast-paced projects.
- Knowledge of SDLC, identity and access management, disaster recovery, vulnerability management, and cloud/control environments.
Skills Required
- Business-level Japanese communication capability
- Business-level English communication capability
- Professional experience in IT audit, IT governance, security compliance, technology risk, or related control-assurance work in highly regulated environments
- Experience supporting security assessments and IT control evaluations
- Strong understanding of audit methodologies, internal controls, and evidence requirements
- Hands-on experience with ISMAP assessments or closely related security-control frameworks and certification programs
- Working knowledge of ITGC, ITAC, IT risk assessment, internal controls, security governance, and compliance documentation
- Ability to facilitate discussions and walkthroughs in English with global engineering and compliance teams
- Ability to coordinate effectively with Japanese stakeholders
- Ability to lead assigned workstreams, manage multiple priorities, and coordinate cross-functional stakeholders
- Knowledge of SDLC, identity and access management, disaster recovery, vulnerability management, and cloud/control environments
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
NexusCorp LLC (operating as Nexus Corporation) helps businesses achieve their goals through custom software development, IT consulting, statement-of-work delivery, contingent workforce and direct-hire solutions, and payroll services. It designs, builds, tests, and maintains scalable digital applications; analyzes systems to improve technology use; and supplies specialized professionals and structured project delivery. Its client-first approach emphasizes compliance, integrity, innovation, and tailored business outcomes.
