Cyber Security & Technology Risk Consultant

We are looking for a Bilingual Cyber Security & Technology Risk Consultant in Japan for a leading global technology organization. The role is primarily focused on IT audit, ISMAP security assessments, IT control evaluations, audit documentation, evidence management, remediation support, continuous compliance monitoring, and stakeholder coordination across Japanese and global teams.

Work Style: Hybrid

Work Place: Tokyo, Japan

Key Responsibilities:

• Support multiple ISMAP security assessment and audit cycles, including planning, control assessment, walkthroughs, evidence collection, documentation, and follow-up activities.
• Assess and document IT General Controls (ITGC), IT Application Controls (ITAC), and other internal security and technology controls.
• Manage audit evidence requests, trackers, control narratives, risk and issue logs, remediation actions, and audit-ready documentation.
• Coordinate with engineering, information security, compliance, legal, risk, and business stakeholders in Japan and globally.
• Facilitate control walkthroughs, status meetings, and audit discussions in both Japanese and English.
• Support IT governance, security compliance, IT risk assessments, and continuous compliance monitoring.
• Lead assigned workstreams, manage priorities and dependencies, and provide clear status reporting to project stakeholders.
• Contribute to the evaluation of controls related to SDLC, identity and access management, disaster recovery, vulnerability management, cloud services, and change management.
  
  

Requirements

Required Qualifications:

• Bilingual communication capability: business-level Japanese and business-level English.
• Solid professional experience in IT Audit, IT Governance, Security Compliance, Technology Risk, or related control-assurance work within highly regulated environments.
• Experience supporting security assessments and IT control evaluations, with a strong understanding of audit methodologies, internal controls, and evidence requirements.
• Hands-on experience with ISMAP assessments or closely related security-control frameworks and certification programs.
• Working knowledge of ITGC, ITAC, IT risk assessment, internal controls, security governance, and compliance documentation.
• Ability to facilitate discussions and walkthroughs in English with global engineering and compliance teams, and to coordinate effectively with Japanese stakeholders.
• Proven ability to lead assigned workstreams, manage multiple priorities, and coordinate cross-functional stakeholders in fast-paced projects.
• Knowledge of SDLC, identity and access management, disaster recovery, vulnerability management, and cloud/control environments.