Cisco ISMAP Security & Compliance Engineer

We are seeking an experienced ISMAP Security Compliance Engineer to support a strategic Cisco security compliance initiative in Japan.

The successful candidate will play a key role in achieving and maintaining ISMAP certification by supporting security compliance programs, audit activities, documentation management, regulatory alignment, and continuous compliance monitoring.

This role requires close collaboration with Japanese and global stakeholders, auditors, compliance teams, and security operations teams.

Key Responsibilities:

ISMAP Compliance & Certification

• Support ISMAP certification and compliance initiatives.
• Conduct security compliance assessments and gap analysis.
• Support remediation planning and compliance activities.
• Ensure alignment with Japanese regulatory requirements.

Audit Support & Governance

• Support internal and external audit activities.
• Prepare and manage audit evidence and documentation.
• Coordinate auditor reviews and stakeholder communications.
• Track audit findings and remediation actions.

Documentation & Localization

• Develop, maintain, and localize security documentation.
• Create policies, procedures, standards, Methods of Procedure (MoPs), and audit artifacts.
• Support English-Japanese documentation reviews.
• Ensure compliance documentation remains current and audit-ready.

Continuous Monitoring:

• Support ongoing compliance monitoring activities.
• Maintain security and compliance evidence repositories.
• Participate in continuous certification maintenance activities.
• Support governance reporting and compliance reviews.

Stakeholder Management

• Coordinate with global security teams and Japanese stakeholders.
• Facilitate discussions between English- and Japanese-speaking teams.
• Support compliance workshops and audit meetings.

Required Qualifications:

Language

• Business-level Japanese (Mandatory)
• Business-level English (Mandatory)
• Ability to communicate effectively with both technical and non-technical stakeholders

Professional Experience

• 7+ years of cybersecurity experience
• 5+ years of cloud security experience
• Experience supporting security, risk, compliance, or privacy programs

Compliance & Regulatory Knowledge:

Hands-on experience in one or more of the following:

• ISMAP
• ISO 27001
• NIST
• Security Governance
• Risk Management
• Compliance Programs
• Audit Management
• Privacy & Security Control Frameworks

Cloud Security

Strong understanding of:

• AWS
• Microsoft Azure
• Google Cloud Platform (GCP)

Preferred Qualifications

Security & Compliance Certifications

• CISSP
• CISA
• CCSK
• CISM
• ISO 27001 Lead Auditor

Security Domains

Experience with:

• Identity & Access Management (IAM)
• Authentication & Authorization
• Vulnerability Management
• Disaster Recovery
• Security Operations
• Security Architecture

Technical Exposure

Knowledge of:

• Python
• Ansible
• Git
• Jenkins
• Visual Studio Code (VS Code)
• Infrastructure as Code (IaC)
• SD-WAN Technologies

Language Skills:

Japanese: Native or Business (JLPT N2)

English: Business