Job Description: About Organization The Security Governance function is responsible for strengthening information security governance, risk management, regulatory resilience, AI security and governance, and assurance across the organization. The Digital Trust & Regulatory Resilience (DTRR) section provides an integrated governance capability across cyber security, data, privacy, AI, regulatory compliance, assurance, human risk, and enterprise risk intelligence. DTRR operates through six interconnected strategic pillars: Data Trust, Privacy & Protection Governance; Adaptive Compliance & Regulatory Intelligence; Intelligent Governance & Policy Automation; Human Risk & Security Culture; AI Security & Responsible AI Governance; and Integrated Cyber Risk Intelligence. The function is supported by strategic capabilities including DTDPG - Digital Trust Data Product Governance, DTRC - Digital Trust Regulatory Compliance, DTAM - Digital Trust Assurance Model, DTEN - Digital Trust Enablement Network, DTARG - Digital Trust AI & Responsible Governance, and DTRIM - Digital Trust Risk Intelligence Management. Job Duties The Information Security GRC Specialist is an experienced individual contributor and cross-pillar enabling role. The role does not replace the accountability of DTRR Pillar Leads and is not accountable for the strategic ownership of DTAM, DTEN, DTDPG, DTRC, DTARG, or DTRIM. Operating flow: Requirements -> Governance -> Controls & Processes -> Business Practices -> Adoption & Evidence -> Continuous Improvement The role serves as an important connective capability between DTAM and DTEN, while providing practical GRC support across the wider DTRR operating model. ・Work across the DTRR pillars to support the implementation and continuous improvement of the Digital Trust & Regulatory Resilience operating model. ・Provide hands-on governance, risk, and compliance support to DTRR Pillar Leads, helping translate strategic objectives into practical processes, controls, standards, procedures, and operational guidance. ・Provide primary cross-functional support to DTAM - Digital Trust Assurance Model, including control framework development, control mapping, evidence requirements, assessment processes, remediation tracking, control maturity, and assurance activities. ・Support the development, review, maintenance, and continuous improvement of information security policies, standards, procedures, operational manuals, and governance processes. ・Support policy and standards lifecycle management, including periodic reviews, stakeholder consultation, change impact assessment, approval preparation, communication, and implementation tracking. ・Support the development and adoption of governance automation capabilities, including workflow automation and AI-assisted policy, standards, control, and evidence review processes. ・Assist in translating regulatory, security, data, privacy, AI, and business requirements into practical controls and governance processes. ・Support the maintenance and evolution of the DTRR control framework, including mapping requirements from ISO/IEC 27001, ISO/IEC 27002, ISMS, ISMAP, and other applicable standards and regulatory frameworks. ・Support ISMS and ISMAP readiness activities, including control reviews, evidence preparation, gap identification, remediation tracking, internal assessments, and audit coordination. ・Support the DTRR exception management process, including intake, assessment, documentation, compensating controls, approval routing, expiration monitoring, remediation tracking, and closure. ・Support internal and external assurance activities by coordinating evidence, control-owner responses, remediation actions, and audit readiness across relevant stakeholders. ・Provide primary cross-functional support to DTEN - Digital Trust Enablement Network, helping translate governance requirements into practical guidance, communications, awareness, training, and business enablement activities. ・Support and coach Trust Enablement Representatives and other business stakeholders in understanding their responsibilities for security, data, privacy, AI, risk, and regulatory governance. ・Help develop role-based guidance and enablement materials for control owners, business owners, data owners, data stewards, technical custodians, product owners, and other governance stakeholders. ・Support security and Digital Trust awareness initiatives that strengthen organizational understanding of security, data protection, responsible AI, regulatory obligations, and risk accountability. ・Identify recurring areas of misunderstanding, control failure, process friction, or poor adoption and work with DTAM, DTEN, and the relevant Pillar Lead to improve the underlying governance process. ・Support DTDPG - Digital Trust Data Product Governance by helping operationalize data governance processes, data classification and handling requirements, ownership and stewardship responsibilities, HPDU governance, cloud data governance, and HLD-related governance requirements. ・Support DTRC - Digital Trust Regulatory Compliance by helping translate regulatory requirements into controls, policies, standards, processes, evidence requirements, and organizational guidance. ・Support DTARG - Digital Trust AI & Responsible Governance through AI policy and standards development, AI governance processes, risk assessment support, ISO/IEC 42001 alignment, responsible AI awareness, and integration of AI governance requirements into DTAM and DTEN. ・Support DTRIM - Digital Trust Risk Intelligence Management by contributing consistent control, assurance, exception, adoption, and governance data for risk intelligence, KPI/KRI measurement, and management reporting. ・Support development and improvement of internal DTRR processes, ensuring activities are clearly documented, repeatable, scalable, and aligned with defined roles and decision rights. ・Facilitate cross-pillar working sessions to identify dependencies, clarify responsibilities, resolve governance gaps, and coordinate activities requiring multiple DTRR capabilities. ・Support Security High-Level Design and other governance review processes where DTRR involvement is required, helping identify applicable data, privacy, security, AI, regulatory, and control requirements. ・Support incident-response governance where required, including coordination of governance actions, control impact reviews, remediation tracking, lessons learned, and translation of incident findings into policy, control, process, or awareness improvements. ・Support governance metrics and reporting by helping define, collect, validate, and improve KPIs and KRIs relating to control effectiveness, exceptions, assurance, adoption, policy health, remediation, and governance maturity. ・Identify opportunities to simplify, standardize, and automate GRC activities while maintaining appropriate governance, accountability, evidence, and human oversight. ・Maintain awareness of emerging information security, regulatory, AI, data protection, risk, and governance practices and help assess their relevance to DTRR. ・Build collaborative relationships across Security, Technology, Business Units, Privacy, Legal, Compliance, Internal Audit, Cloud, Data, AI, and other relevant functions to support consistent adoption of DTRR requirements. ・Promote a culture of practical governance, shared accountability, continuous improvement, and Digital Trust across the organization. Minimum Qualification ・Bachelor's degree in Information Technology, Law, Finance, Cybersecurity, Engineering, or a related field. An advanced degree (Master's or higher) in a relevant discipline, such as an MBA or Cybersecurity, is highly preferred. ・Relevant professional certifications such as CISA, CISM, CRISC, CISSP, CGEIT, ISO/IEC 27001, ISO/IEC 42001, NIST CSF, or other qualifications demonstrating expertise across GRC, information security, risk, compliance, or Digital Trust domains are good to have. ・7-12 years of progressive experience in Governance, Risk Management, Information Security, and/or Compliance roles, with experience supporting significant programs, developing the capabilities of others, or assuming responsibility for key program components. ・Proven experience working within or alongside teams of GRC professionals, including experience coaching, mentoring, supporting development, and improving team or stakeholder capability. ・Broad understanding across multiple GRC domains, including security risk management, compliance management, policy and standards management, third-party risk, business continuity, information security governance, assurance, and control management. ・Strong experience with GRC technology platforms and governance automation; experience with leading GRC, compliance automation, workflow, or control-management platforms is a significant advantage. ・ Strong critical thinking, leadership, problem-solving, and influencing skills, with the ability to operate effectively across organizational and functional boundaries. ・Excellent verbal and written communication, presentation, facilitation, and interpersonal skills, with the ability to translate complex technical, risk, security, and regulatory information for diverse audiences, including non-technical stakeholders and executives. ・Demonstrated ability to manage multiple priorities, projects, dependencies, and stakeholders within a fast-paced and evolving environment. ・Ability to work as a senior individual contributor, provide guidance and coaching to others, and influence outcomes without requiring direct management authority. Languages: English (Overall - 3 - Advanced)、 Japanese (Overall - 4 - Fluent) Looking for members to join our mobile phone business “They cannot succeed if they step into the field at this late date” Some people say Rakuten is reckless in trying to enter the mobile communications business. However, innovation is realized if we succeed when something seems impossible. At Rakuten, we think the world changes when we achieve such changes. Because our history has always been a series of innovations since our establishment. Launching a communication carrier is an opportunity that we have once in our lives. Crack open the current communication industry. Blow new wind into life. Why not create innovation with us? Why not do something big? Job Opening: Regular Employee Company Name Rakuten Mobile, Inc. Qualifications [Required] TOEIC score of 600 or equivalent English proficiency/skills. Rakuten Group Englishnization Rakuten Mobile, Inc. aims for all employees to achieve a TOEIC score of 800 or higher, in line with Rakuten Group, Inc.'s Englishnization policy. As a first step, a TOEIC score of 600 (or equivalent English proficiency) is required for mid-career hires. Job Responsibilities [Upon initial hiring] Varies depending on the position. The scope of work changes may include assignments to other duties determined by the company based on directives, etc. (If a transfer is ordered in accordance with the secondment regulations, the duties will be those of the seconded company.) Contract Period No fixed term Probationary Period Yes (3 months) The probationary period may be extended at the company's discretion. Employment conditions will not change during the probationary period. Work Location [Upon initial hiring] Headquarters (Rakuten Crimson House, 1-14-1 Tamagawa, Setagaya-ku, Tokyo), and other business sites. The scope of work location changes may include reassignments or transfers to locations nationwide and overseas. If remote work is partially permitted, the work location will be the remote work location approved by the company. The work location at the time of hiring will be communicated in the job description for each position and the offer letter. As a measure against passive smoking, smoking is prohibited on the premises of Rakuten Crimson House (however, this may vary depending on the business site). Working Hours Standard working hours: 9:00 AM - 5:30 PM On days when Rakuten Group morning meetings are held, the prescribed working hours will be 8:00 AM - 4:30 PM. Prescribed working hours are 7.5 hours, with a 1-hour break. A flextime system is partially applied. Core time: 11:00 AM - 3:00 PM (8:00 AM - 12:00 PM on morning meeting days) Some positions may differ from the above; details will be specified in the offer letter (e.g., application of discretionary labor system). Overtime work or work on holidays may be instructed. Holidays/Leave/Absence Complete two-day weekend system (Saturday and Sunday) and national holidays Summer vacation, New Year's holiday, annual paid leave, menstrual leave, special leave (condolence, volunteer, etc.) Maternity leave, childcare leave, family care leave Some positions may differ from the above; details will be specified in the offer letter. Salary Monthly salary: JPY300,000 ~ (Breakdown: Base salary JPY 227,848 + fixed overtime pay for 40 hours JPY 72,152) The above is the minimum salary offered for mid-career hires. Overtime work exceeding 40 hours per month will be paid separately as overtime allowance. Some positions may differ from the above; details will be specified in the offer letter (e.g., application of discretionary labor system). Commuting allowance will be provided (conditions and maximum amount apply). Salary Increase Yes Reviewed in January and July based on company performance and individual evaluation. Bonus Yes Paid in June and December based on company performance and individual evaluation. Stock Option Plan Yes Retirement Allowance Yes Insurance Employees' Pension Insurance, Health Insurance, Workers' Accident Compensation Insurance, Employment Insurance, etc. Benefits Cafeteria (breakfast, lunch, dinner generally free) Employee Stock Ownership Plan English learning support, etc. Job Opening: Fixed-term Employee Company Name Rakuten Mobile, Inc. Qualifications Varies depending on the recruiting position. Job Responsibilities [Upon initial hiring] Varies depending on the recruiting position. The scope of work changes may include assignments to other duties determined by the company based on directives, etc. (If a transfer is ordered in accordance with the secondment regulations, the duties will be those of the seconded company.) Contract Period Fixed term Maximum contract renewal period: Yes (The total contract period is 5 years, starting from the initial employment contract date.) Probationary Period None Work Location [Upon initial hiring] Headquarters (Rakuten Crimson House, 1-14-1 Tamagawa, Setagaya-ku, Tokyo), and other business sites. The scope of work location changes may include reassignments or transfers to locations nationwide and overseas. If remote work is partially permitted, the work location will be the remote work location approved by the company. The work location at the time of hiring will be communicated in the job description for each position and the offer letter. As a measure against passive smoking, smoking is prohibited on the premises of Rakuten Crimson House (however, this may vary depending on the business site). Working Hours Standard working hours: 9:00 AM - 5:30 PM On days when Rakuten Group morning meetings are held, the prescribed working hours will be 8:00 AM - 4:30 PM. Prescribed working hours are 7.5 hours, with a 1-hour break. A flextime system is partially applied. Core time: 11:00 AM - 3:00 PM (8:00 AM - 12:00 PM on morning meeting days) Some positions may differ from the above; details will be specified in the offer letter (e.g., application of discretionary labor system). Overtime work or work on holidays may be instructed. Holidays/Leave/Absence Complete two-day weekend system (Saturday and Sunday) and national holidays Summer vacation, New Year's holiday, annual paid leave, menstrual leave, special leave (condolence, volunteer, etc.) Maternity leave, childcare leave, family care leave Some positions may differ from the above; details will be specified in the offer letter. Salary Determined individually based on experience, etc. Commuting allowance will be provided (conditions and maximum amount apply). Salary Increase Yes Upon contract renewal, a salary revision may be proposed based on the most recent evaluation. Bonus May be paid taking into account company performance, general economic conditions, and work performance/abilities. Stock Option Plan None Retirement Allowance None Insurance Employees' Pension Insurance, Health Insurance, Workers' Accident Compensation Insurance, Employment Insurance, etc. Benefits Cafeteria (breakfast, lunch, dinner generally free) Employee Stock Ownership Plan English learning support, etc.

Information Security GRC Specialist (Manager Potential) -Security Governance Section (RMI Telecommunication Security Supervisory Dep).

more at Rakuten.

モバイルネットワーク本部：技術企画担当 (RMI ネットワーク統括本部)

エンタープライズ&インテグレーション課　GC構築グループ：ネットワークエンジニア (RMI 伝送ネットワーク技術部)

Senior Engineer - 5G Cloud (RMI Core Network Operations Dep)

similar roles.

Sr. Product Security Engineer

Global Product Lead - Reporting & Security

Sr Assistant, Forests

Lead, System Security

R157023 Shift Controls Technician ($5K Sign-on Bonus)

Director, Security Engineer