[Japan] Cybersecurity Architect, Global Information Security

Job Description

Job’s mission

Under the direct supervision of the Cybersecurity Senior Manager, with oversight and guidance from the Global Head of Information Security, the job holder is part of the Global Information Security Function (Digital & IT Division), responsible for execution of Global Cyber Defense Strategy, implementation of technical solutions to defend Santen from cyberattacks, running risk assessments of all new global solutions, managing the risk and vulnerability management process (both Information Systems and Industrial Control Systems), developing and maintaining the organization's security architecture, which is in line with security regulations, standards and best practices, managing the SOC (Security Operations Center) partner in order to ensure that information assets are adequately protected and compliant as well as maximize the benefit of information systems for Santen’s global businesses.

Translate cyber risks, threat intelligence, regulatory requirements and business requirements into scalable security architecture, technical standards and security capabilities. Provide security architecture leadership for emerging technologies including AI/Generative AI and ensure that cybersecurity enables digital innovation while protecting Santen's critical business operations, information and manufacturing capabilities.

 

Number of direct subordinates

No direct subordinates as of the recruitment date however there will be several Digital & IT members and external consultants whose activities need to be coordinated by this role within the framework of cybersecurity projects or processes.

 

Key Responsibilities & Accountabilities

 

Cybersecurity Defense & Management

• According to the company’s long-term vision, execute the cybersecurity strategies by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions
• Understand expectations of the company with regard to continuous growth, establish concrete goals, and create mid-term strategies to achieve goals
• Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations (Santen’s Global SOC)
• Anticipate future internal and external trends and implications and create appropriate cybersecurity measures
• Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks
   

Enterprise Security Architecture & Governance

• Define and maintain Santen's enterprise security architecture principles, reference architectures, patterns and technical security standards.
• Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements both to technical and non-technical leaders (Information Systems and Industrial Control Systems global leaders)
• Act as Security Architect in global program & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness
• Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale
• Perform ongoing security maturity level assessments (Application Advisory Board Reviews and Critical 3rd Party Assessments such as; SOC Vendor, Infra Support Vendors) to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management
• Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws)
• Identify architectural security debt and drive prioritized remediation with DIT members.

 

Security Incident Management

• Ensure the security incident management process are executed properly by regional Infra leads by tracking the resolution process and making sure the known issues are addressed according to risk management methodology
• Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources
• Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity
• Correlates network, cloud and endpoint activity across environments to identify attacks and unauthorized use
• Supports the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results and making changes necessary to address deficiencies
• Reviews alerts and data from sensors, and documents formal, technical incident reports
• Manage the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved

 

Vulnerability & Exposure Management

• Lead the evolution from traditional vulnerability management toward risk-based exposure management considering vulnerabilities, asset criticality, exploitability, threat intelligence, attack paths and compensating controls.
• Coordinate vulnerability remediation, compensating controls and risk acceptance.
• Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps; Discovery, Reporting and Remediation
• Guide the technical teams (Global Infra, Regional Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner
• Manage the global vulnerability scan and penetration test exercises

 

Insider Threat & Insider Risk Management

• Define and continuously improve Santen's insider threat and insider risk management capabilities.
• Establish risk-based monitoring, detection and investigation capabilities for unauthorized access, data exfiltration, privilege misuse and other insider risks.
• Coordinate technical investigations across identity, endpoint, cloud, application and data environments in collaboration with Legal, HR, Compliance and Privacy stakeholders.
• Translate investigation findings and emerging insider threats into improvements in security architecture, access controls, monitoring and data protection.
• Define relevant metrics to measure insider risk exposure and the effectiveness of preventive, detective and responsive controls.

Cyber Resilience

• Design security architecture to minimize the business impact of disruptive cyberattacks.
• Define cyber resilience requirements for critical business and OT systems.
• Support development of cyber recovery strategies including isolation, alternate operations and secure restoration.
• Validate resilience through exercises, simulations and recovery testing.

 

Threat Intelligence

• Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities
• Keep track of changes in Santen’s business, threat landscape, product innovations and  rebalance accordingly
• Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited

Qualifications

Education

• Bachelor's degree in Business, Computer Sciences, Engineering, or related field
• Relevant Cyber security certifications (CISSP, CISM, CISA, CompTIA Security+ or X, CEH, Registered Information Security Specialist, etc.)

                                                                                                                                                                               

Experience

• Minimum of 7 years experiences in Information Systems, including minimum of 4 years experiences in the fields of Information Security, Cybersecurity, Risk Management, Business Continuity Management
• Experience with program implementations such as ISO, NIST CSF, COBIT and other related compliance frameworks
• Experience in performing risk, business impact, control and vulnerability assessments, and in defining treatment strategies
• Successful experiences of project management
• International experience of working with teams spread across different countries and global stakeholders
• Excellent track records of delivering results

 

Functional Competencies

• Expert understanding of cybersecurity concepts, principles and practices
• Expert knowledge of current and emerging cybersecurity risks, and innovative risk management methods and solutions
• Knowledge of security best practices in public cloud environments
• Knowledge with SASE, CASB, SWG, ZTNA technologies is an asset
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one
• Strong problem-solving and troubleshooting skills
• Strong understanding of the business impact of security tools, technologies and policies
• Practical project management skills applied to information systems and services
• Documentation and presentation skills that are convincing for management
• Comfortable working in English, both written and spoken

Santen Leadership Competencies        

Generic style

• Independent & autonomous, while still a strong teammate
• Strong sense of integrity
• Enthusiastic and self-starting

Achieving Valuable Business Results

• Stays focus on business value
• Sets clear, challenging goals, then measures the result
• Deals with performance issues of the projects/implementations in a timely manner
• Look for new solutions, new technologies, using innovative approach

Thinking and Decision Making

• Takes a systematic and methodical approach to work
• Strong analytical, research, and problem-solving skills with a keen attention to detail
• Makes most effective questions before problems resolution plans are made
• Makes clear and timely decisions, forward-thinking

Influencing

• Good interpersonal and communication skills in order to share knowledge with a variety of levels, and to communicate effectively with business and technical functions
• Uses a mixture of data, logical arguments and organizational knowledge to achieve the desired results
• Ability to prioritize incoming escalations and requests appropriately using clear communications.

Additional Information

Santenにおけるキャリア構築
Santenでのキャリアは、あなたにとって変化をもたらす機会となります。Santenは、「Santen2030」に示されている長期的ビジョンを通じて、視覚障がい者の社会的・経済的ニーズに応える社会イノベーターとなることを目指しています。そのために私たちは、世界中のチームメンバーと多様な才能を発揮し合い、柔軟な働き方とインクルーシブな職場環境を提供しております。その結果、新たなソリューションを発見し、患者様への理解、治療の革新を推進しています。

Santenグループは、Equal Opportunity Employerです。  私たちは、多様なチームを構築し、チームメンバー一人ひとりにとって安全でインクルーシブな物理的・仮想的職場を提供することを約束します。すべての雇用は、人種、肌の色、民族、出身/祖先、宗教、性的指向、性別、性同一性/表現、年齢、障がい、病状、配偶者の有無、退役軍人の有無、または法律で保護されているその他の特性に関係なく、ビジネスニーズ、役割要件、個人のスキルセットに基づいて行われます。

当社の採用プロセスにおいて何らかの便宜を図る必要がある場合は、当社チームの採用担当者にお知らせください。

Company Description

Santenは、眼科領域に特化したグローバル製薬企業として、世界中の人々が「見る」ことを通じて、より豊かで幸せな人生を送れるよう、目の健康の維持・向上に取り組んでいます。 1890年に日本・大阪で創業して以来、135年以上にわたり、眼科領域における医薬品および医療機器の研究開発・製造、および販売を通じて、世界中の人々の目の健康をサポートしてきました。 Santenは眼科領域を専門とし、緑内障、ドライアイ、感染症、アレルギー、加齢黄斑変性、近視など、幅広い疾患領域に対応する製品ポートフォリオを有しています。