Senior Security and Privacy Analyst

Responsibilities

• Lead and operationalize APAC-specific certification and audit activities, focusing on Japan's ISMAP and Australia's IRAP
• Support compliance with APAC data protection laws including Japan's APPI, Australia's Privacy Act, and South Korea's PIPA
• Contribute to day-to-day information security and privacy operations and incident response
• Support internal and external audit readiness for SOC 2 Type II, ISO 27001, and ISO 27701
• Partner with APAC sales to respond to customer security questionnaires, RFPs, and due diligence requests
• Maintain security and privacy documentation in both Japanese and English
• Collaborate with regional Security Champions to drive localized security initiatives
• Support vendor risk assessments and third-party security evaluations

Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering, Law, or a related field
• 5–8 years of experience in information security, privacy, compliance, or risk management
• At least 2 years of experience supporting APAC-region compliance programs
• Fluent in Japanese and English (spoken and written) with ability to translate technical concepts
• Strong technical writing, editing, and proofreading skills in both languages
• Solid understanding of networking, cloud infrastructure, and information security principles
• Familiarity with frameworks such as ISO 27001, ISO 27002, SOC 2, and NIST SP 800-53
• Working knowledge of APAC privacy regulations (APPI, Privacy Act, PDPA)

Preferred Qualifications

• Expertise in Japan's ISMAP or Australia's IRAP frameworks
• Proficiency in Chinese (Mandarin) or Vietnamese
• Certifications such as CIPP/A, CISSP, CISM, CISA, or ISO 27001 Lead Auditor
• Experience in a SaaS, cloud software, or technology company
• Experience in sales enablement and responding to RFPs

About the Company

AvePoint is a leader in data management, providing solutions to help organizations manage, govern, and secure their data across various cloud platforms.