Security Engineer CIO Office - Company CIO Office (CIOO)

Job Description: Business Overview Rakuten is Japan’s largest marketplace and an internet ecosystem offering a wide range of over 70 services, including e-commerce, travel, banking, fintech, food delivery, golf, insurance, instant messaging, and mobile networks. While Rakuten operates more than 140 services worldwide, its Communications & Energy Company is the division responsible for providing communication platforms to information and communications technology (ICT) and international telecommunications operators—primarily in the mobile phone sector—as well as for power and energy-related businesses. https://corp.rakuten.co.jp/about/company/communications_energy.html Department Overview The Company CIO Office is working to strengthen IT strategy and governance at Rakuten Mobile and Rakuten Symphony, with the aim of accelerating business growth and ensuring sustainable development. By communicating not only with senior management but also with various stakeholders across the organization, we are working to optimize company-wide management and system administration. Our top mission is to continuously strengthen the management and operation of a world-class security foundation for the telecommunications services provided by Rakuten Mobile and Rakuten Symphony, ensuring service stability and data safety while earning and preserving our customers’ trust. We assess the current security level of networks and systems, identify and analyze risks, proactively prevent the ever-growing threat of cyberattacks, and lead root-cause identification and recurrence prevention when incidents occur. It is our mission to embody “proactive security” that leverages technical expertise to balance business growth with safety. Position: Security Engineer Position Details Reporting directly to the Company CIO, you will lead the development and implementation of enterprise-wide security strategy in collaboration with the CISO and the security team. Our mission is to protect a large-scale telecommunications infrastructure from cyber threats and continuously evolve it as a "trusted business foundation" that accelerates our operations. Working with global technical teams, you will assess and analyze current security levels and maturity, create security policies and rules to mitigate risk (strengthening governance), and provide technical support to elevate security levels, thereby supporting business growth. This role offers an environment where, through discussions in English with global teams, you can hone the technical skills needed to counter world-class threats. Work Environment Company CIO Office has just under 20 members. The organization as a whole has a high proportion of mid-career hires, including not only those with telecommunications industry experience but also many individuals without prior industry background. Consequently, the onboarding of mid-career employees is smooth. Even without industry or practical experience, this is an environment where you can steadily grow with support from experienced members. Mandatory Qualifications: ・ At least 3 years of practical experience in IT infrastructure and/or security-related fields. ・ Basic knowledge of IT infrastructure (networking, servers, cloud, etc.) ・ Practical experience in security-related work (operations, design, assessments, etc.) ・ Experience formulating security strategy and policies: practical experience creating security policies and building governance at the company-wide or business-unit level. ・ Security design and implementation in cloud environments (AWS/GCP/Azure): Experience with cloud-specific security configurations, IAM design, and implementing network security (including security implementation using IaC). ・ Experience implementing and promoting DevSecOps: integrating security tools (vulnerability scanning, etc.) into CI/CD pipelines and improving security processes in collaboration with development teams. ・ Practical experience in incident response (CSIRT/SOC): experience in monitoring and analysis in large-scale environments and leadership from initial response through resolution when incidents occur. ・ Business-level English proficiency: able to engage in technical discussions, coordinate, and negotiate with global teams. ・ Security assessment: risk evaluation and risk mitigation planning Any of the above experiences Desired Qualifications: Experience in large-scale environments: Security operations experience at telecommunications carriers or large web services Development and operations knowledge: Practical experience in application development or as an infrastructure engineer (networking, servers, cloud, etc.) Security automation: Experience developing and automating security operations tools using Python, Go, or similar languages Governance development: Experience formulating security strategies and rules based on frameworks such as ISO 27001 or NIST CSF International certifications: PMI, CISSP, CISM, CISA National certifications: Applied Information Technology Engineer, Information Security Management, Expert Information Security Promotion Specialist Cloud and technical certifications: AWS Certified Security – Specialty, CompTIA Security+ / CySA+ #engineer #securityengineer #informationsecurity #privacygovernance #technologymanagement #communicationsandenergy #RakutenMobile Languages: English (Overall - 3 - Advanced)