AVP, Info Security Governance, Risk & Control

About the company

Our client is an international financial services organisation that provides insurance and related services to individuals and businesses. Its work is focused on helping customers plan for the future and navigate change with greater confidence. The organisation combines local understanding with global experience, and is committed to building trusted relationships with customers and communities.

The culture values collaboration, inclusion, curiosity and continuous improvement. It is also evolving how it works, using technology responsibly to improve service while supporting human judgement and creativity. This is an opportunity to contribute to an important function in a complex, global environment, working with colleagues across Japan and international teams to strengthen the security and resilience of the business.

What the job entails

As AVP, Information Security Governance, Risk & Control, you will lead the development and management of information security governance, risk and control activities in Japan, reporting to the Japan Chief Information Security Officer. You will shape policies, standards and procedures, and ensure they align with relevant regulatory requirements and established security practices.

You will identify and assess security risks, oversee appropriate controls, and guide compliance activities, including audits and assessments to identify and address gaps. The remit also covers third-party risk, ensuring vendors and partners meet security expectations. You will drive ongoing improvements to governance and control processes, including the automation of key controls, and work closely with stakeholders across local and global teams. Through clear leadership and collaboration, you will help protect information systems and data from unauthorised access, disclosure, alteration or destruction.

Key requirements

• A bachelor’s degree in cyber security, information technology or a related discipline; a master’s degree is preferred.
• At least 10 years’ experience in cyber security, including a minimum of five years in a leadership role.
• Strong knowledge of cyber security frameworks, standards and best practice, with experience across governance, risk management, compliance and controls.
• Demonstrated experience in people management, continuous improvement and automation of key controls.
• Experience working in a global environment and managing stakeholders across local and international teams.
• Excellent communication and interpersonal skills, with the ability to work effectively with diverse teams.
• Fluency in both Japanese and English, with strong proficiency in each.
• Familiarity with standards such as NIST CSF, PCI DSS or FISC is preferred.
• Relevant certifications, such as CISSP, CISM or CISA, are highly desirable.
• Experience with project management and data visualisation tools is an advantage.
• A strategic, results-focused approach, with the ability to lead change, identify longer-term opportunities and motivate diverse teams.