Senior Security and Privacy Analyst

Responsibilities

• Lead and operationalize APAC-specific certification and audit activities, focusing on Japan's ISMAP and Australia's IRAP
• Support compliance with APAC data protection laws including Japan's APPI, Australia's Privacy Act, and South Korea's PIPA
• Contribute to day-to-day information security and privacy operations and incident response
• Support internal and external audit readiness for SOC 2 Type II, ISO 27001, and ISO 27701
• Partner with APAC sales to respond to customer security questionnaires, RFPs, and due diligence requests
• Maintain security and privacy documentation in both Japanese and English
• Collaborate with regional Security Champions to enhance security awareness
• Support vendor risk assessments and third-party security evaluations

Requirements

• Bachelor's degree in Information Security, Computer Science, Engineering, Law, or a related field
• 5–8 years of experience in information security, privacy, compliance, or risk management
• At least 2 years of experience supporting APAC-region compliance programs
• Fluent in Japanese and English (spoken and written) with ability to translate technical concepts
• Strong technical writing, editing, and proofreading skills in both languages
• Solid understanding of networking, cloud infrastructure, and information security principles
• Familiarity with ISO 27001, ISO 27002, SOC 2, and NIST SP 800-53
• Working knowledge of APAC privacy regulations (APPI, Privacy Act, PDPA)

Preferred Qualifications

• Expertise in Japan's ISMAP or Australia's IRAP frameworks
• Proficiency in Chinese (Mandarin) or Vietnamese
• Certifications such as CIPP/A, CISSP, CISM, CISA, or ISO 27001 Lead Auditor
• Experience in a SaaS or cloud software company
• Experience in sales enablement and security questionnaire responses

Benefits

• HMO coverage from day 1 (plus 2 free dependents)
• Group life insurance and wellness reimbursement program
• Paid annual, sick, and compassionate leave
• Hybrid working arrangement (3 days onsite, 2 days work-from-home)
• Professional development support and certification sponsorship
• Performance bonuses and incentives