Description and Requirements

＜Recruiter:Shibata＞

＜Job Summary＞

• We are seeking an Information Security (IS) Risk Governance professional for a leading life insurance company based in Tokyo.
• You will be expected to play a critical role in protecting the confidentiality, integrity, and availability of the company's and customers' information.
• You will be expected to provide hands-on work for daily activities while proactively proposing solutions to drive continuous improvement.
• You will be expected to promote our IS programs by working closely in the IT organization and with other control functions as well as related businesses, while leveraging AI to enhance efficiency and effectiveness.

＜Responsibilities＞

This position serves the following critical functions within the IS Group. For each area, key responsibilities include assessing, responding to, and driving improvements from an IS Risk Management perspective.

• Maintain policies, procedures, and manuals related to IS.
• Conduct various IS self-assessments and address identified gaps, including cybersecurity self-assessments based on the Guidelines on Cybersecurity for the Financial Sector, IT Non-Financial Risk Assessments (NFRA), and assessment based on the Technical Safety Management Measures under the Personal Information Protection Act (PIPA)
• Continuously enhance IS controls through governance routines.
• Respond to IS questionnaires from group insurance companies and/or bank customers as part of security due diligence processes.
• Manage IS issues, including promoting and supporting issue registration, monitoring remediation progress, and preparing and maintaining relevant metrics and reports for stakeholders.
• Perform IT auditee responsibilities for IT General Controls (ITGC) in US GAAP (SOX) and J-GAAP external IT audits in Japan, including collecting and reviewing relevant documentation and evidence for submission.
• Monitor regulatory changes and industry trends related to IS and analyze their implications to determine necessary actions.
• Support PCI DSS-related activities.
• Proactively communicate and collaborate with local and global stakeholders to execute Governance, Risk Management, and Compliance (GRC) activities related to IS.
• Lead GRC-related initiatives within the IS domain.

＜Requirements (Experience, Skills, Education)＞

• Minimum of 4 years of hands-on experience in the IS field.
• Ability to prepare accurate reports for all levels of staff in clear and appropriate language, as well as deliver effective oral presentations.
• Strong teamwork skills with the ability to collaborate effectively with team members to accomplish tasks.
• Strong problem-solving skills.
• Willing to learn new things in technologies and IS.
• Native or equivalent-level proficiency in Japanese and intermediate-level proficiency in English.

＜Preferable ＞

• Experience in or a strong interest in IT Risk Management areas, including IT security, third-party risk, and emerging technology risk management.
• Experience in or a strong interest in the financial services industry, particularly life insurance.
• Familiarity with regulatory and industry standards such as NIST CSF, PCI DSS, and FISC.

＜Others＞

Qualification: CISA, CISM, CISSP or similar certification is a plus

Language：

☒ English ( ☐ Advanced ☒ Intermediate ☐ Basic)
☒ Japanese ( ☒ Advanced ☐ Intermediate ☐ Basic) ☐ Not Required

Benefits We Offer

MetLife Japan offers a comprehensive benefits package that promotes work-life balance and employee wellbeing. Employees can take advantage of flex time policy and a generous time-off policy, national holidays, annual paid leave, special consecutive leave, and refreshment leave. We also provide full social insurance coverage, a commuting expense reimbursement, group insurance, and discounts on travel and English language lessons. To support work flexibility, employees also have hybrid work options, shortened working hours for parents with children in third grade or below, and a casual dress code.

About MetLife

MetLife Inc., through its subsidiaries and affiliates (MetLife), is one of the world's leading financial services companies, providing insurance, annuities, employee benefits and asset management to help individual and institutional customers build a more confident future. Founded in 1868, MetLife has operations in more than 40 markets globally and holds leading positions in the United States, Asia, Latin America, Europe and the Middle East.

MetLife Japan began operations in February 1973 as Japan's first foreign-owned life insurance company. Our purpose, "Always with you, building a more confident future," encapsulates our strong commitment to leveraging our global network and best practices worldwide to stand with our customers and build trust with our communities.