Sr. Security Engineer - GRC APAC Fintech & Financial Services
Core
Architect and automate Governance, Risk, and Compliance (GRC) systems for Japanese financial services regulation to enable business velocity while ensuring regulatory adherence.
Role type
Senior GRC Engineer (Japan Fintech)
Builds
Automated compliance controls, evidence collection pipelines, and risk registers integrated into CI/CD.
Domain
Japanese Fintech, Banking, and Payments
Required skills
JFSA supervisory expectations, APPI, Compliance-as-Code, ISMS operations, technical control implementation, risk assessment, third-party risk management, secure SDLC, cloud security (AWS/GCP/Azure), incident response governance.
Preferred skills
10+ years GRC/InfoSec experience, DevSecOps integration, threat modeling, SAST/DAST, secrets management, BC/DR validation, cross-jurisdictional control mapping, Japanese language proficiency.
Technologies
Vanta, AWS, GCP, Azure, CI/CD pipelines, JFSA frameworks, APPI.
Responsibilities
Own Japan financial services compliance posture; build Compliance-as-Code capabilities; operate GRC platforms; partner with engineering to bake controls into design; design and validate technical controls; operate risk registers; lead risk assessments; liaise with Legal/Privacy; manage external auditor relationships; develop policies; champion pragmatic governance.
Seniority
Senior, hands-on IC
