【外資系上場金融会社】サードパーティーリスク管理（TPRM）マネージャー

A Globally operating premium Payment Services firm is looking for a Manager - Cybersecurity Operations & Assurance - Third Party Assessment.
This position, Manager-CyberOps & Assurance-Third Party Security Assessments, reporting to the Director of Third Party Security Assessments, will be part of a team responsible for performing technical assessments/inspections of the company’s most critically sensitive third parties. The Manager will be responsible for physical and logical inspection of Information Security and Technology controls and publish assessment results. The Manager will issue gaps, provide consultation and validate remediation of gaps. For further tool enhancement, the Manager will also assist in assessment tool development/maintenance using various third party risk management tools. Additionally, there are expectations of working with multiple teams, external assessors, continuous monitoring, risk management and product/tool management to ensure readiness and effective of process and monitoring tools.

Responsibilities: 
- Performance of technical physical and logical assessments for in-scope third parties
- Contribute to the development and enhancement of current assessment tool capabilities, including AI enablement
- Assist with evaluation, development and maintenance of tools / technologies to support monitoring capabilities
- Perform ongoing tracking and monitoring of progress and assist in management reporting on a periodic basis

Required skills:
- 10+ years of experience in Information Security, and/or Third Party Assessments required
- Demonstrated expertise in Information Security and Third Party Risk
- Intermediate knowledge of GenAI concepts, both for assessment knowledge and internal tool development/maintenance
- Familiarity with secure software development practices
- Expertise in web and mobile application vulnerabilities – detection and mitigation strategies
- Expertise in DAST and SAST scanning technologies, ethical hacking experience desired but not required
- A broad understanding of the terminology, core principles, IT controls and best practices across key risk domains, including risk assessment methodology, identity and access management, network and infrastructure security, application security, data loss prevention, and incident management
- Current certifications in CISSP, CISM, CISA, CRISC, CGEIT, COBIT, or PCI highly preferred

Why should you apply:
- Global brand and reputation
- Great opportunity to be able to work for well-established company
- Very international environment


Company Details: 
A U.S.-based, globally recognized financial services company known for its charge cards, credit cards, and travel-related services. Originally founded in 1850 as an express mail business, it has grown into one of the world's leading providers of payment and travel-related financial solutions. The company employs over 73,000 people worldwide, including approximately 2,200 in Japan.
Its corporate culture is grounded in a 175-year legacy of innovation, shared values, and strong leadership principles, with a consistent commitment to supporting customers, communities, and employees. Due to the global nature of its operations, the role involves regular interaction with international teams and external clients across markets.

Working Hours: Monday through Friday:A: 7:00 – 15:30 (4 days)/7:00-15:00 (1 day) B: 10:30 - 19:00(4 days)/11:00-19:00 (1 day)
Working Style: Hybrid (3 days in office, 2 days work from home)
Holidays: Saturday, Sunday, and National Holidays, Year-end and New Year Holidays, Paid Holidays, Other Special Holidays
Services/Benefits:    Social Insurance / Benefit program / Bento (on Tue, Wed, Thu) / Company Café / Retirement allowance, Childcare leave system etc.
Interview Process: 3 Interviews