About The Role

Business Overview

The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its foundation in technology. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.

Department Overview

The Information Security & Privacy Governance Department (ISPD) enables and accelerates business growth by establishing, maintaining, and enhancing robust information security, privacy, data, and AI governance frameworks across the Rakuten Group. We ensure Rakuten's global operations are secure, compliant, and innovative by adhering to regulatory requirements, providing comprehensive employee training, strategically managing data assets, and governing AI responsibly.

This role belongs to the IT Security Group within the Information Security & Privacy Governance Department. Our objective is to develop measures to ensure that our organizational data remains secure. While doing this, we often partner with other departments to advise them on security best practices.

Position

Position Details

・Partner with our Corporate IT department to secure enterprise SaaS applications and cloud services.
・Implement and maintain CASB, cloud firewall, email security, and data protection policies.
・Monitor security alerts and investigate potential security incidents involving cloud and SaaS services.
・Support security incident investigations and coordinate remediation with IT and cybersecurity teams.
・Review new software, SaaS applications, and cloud services to identify potential security risks.
・Develop and improve security monitoring, reporting, and automation workflows.
・Collaborate with our Cybersecurity Defense department to protect Rakuten applications and services.

Mandatory Qualifications

・3 or more years of experience in IT or cybersecurity-related roles.
・Strong understanding of cloud-based technologies and security principles.
・Good time-management abilities.
・Proactive attitude and strong sense of ownership.
・Ability to communicate technical concepts to non-technical audiences.
・Business level English ability (TOEIC Score 800 or more).

Desired Qualifications

・Hands-on experience with SSE/CASB solutions.
・Experience implementing or operating DLP, CASB, or Zero Trust policies.
・Background in SaaS security, cloud firewalls, or email security.
・Experience in incident response or SOC environments.
#engineer #informationsecurity #privacygovernance #technologymanagementdiv