Security Engineer

Cisco•Published recently•First seen 56 minutes ago

Meet the Team

The Trust and Compliance team is responsible for ensuring that our portfolio meets the cybersecurity compliance and certification standards required for global market access, while simultaneously providing robust security assurances to our customers. Our team plays a pivotal role in identifying customer needs regarding security, privacy, and data management. We collaborate extensively with Sales, Engineering, Supply Chain, Government Affairs, and Legal teams, and are committed to building industry-leading trust and transparency through security and compliance engineering.

Your Impact

We are seeking a strategic leader to manage the internal and external compliance posture of our organization. You will play a critical role in driving the compliance strategy for our Cloud offerings in Japan, specifically supporting a rapidly expanding ISMAP (Information System Security Management and Assessment Program) portfolio. This role requires an individual who can leverage in-depth risk-based decision-making skills to build long-term, sustainable processes that enhance our compliance and security posture. The successful candidate will be expected to obtain and maintain ISMAP-related credentials and contribute to the continued development of the broader organization.

Key Responsibilities:

Contribute under the supervision of the Global Cloud Compliance Strategy Leader to drive technology compliance activities across product offerings.
Serve as a Subject Matter Expert (SME) for ISMAP, providing guidance to cross-functional teams. Act as the primary liaison with external auditors and government agencies for ISMAP audits and certifications.
Conduct information security assessments across critical domains, including User Access Management, Network/OS/Application Security, Vulnerability Management, Encryption, SDLC, Backup/Disaster Recovery, and Physical Security.
Draft compliance reports summarizing objectives and key findings, and collaborate with relevant teams to remediate identified gaps.
Lead engagement with external auditors and customers to provide assurance regarding our Cloud programs.
Assist in compliance testing; identify internal control issues, ensure they are clearly defined, and perform thorough root cause analyses.
Develop, automate, and maintain audit and compliance tasks within GRC and other related platforms.
Build and maintain compliance dashboards to provide a holistic view of the organization’s compliance posture.
Collaborate and coordinate compliance activities with global Cloud teams.

Minimum Qualifications

Bachelor’s or Master’s degree in Information Technology, Computer Science, or a related field.
Minimum of 3 years of experience in cybersecurity regulatory compliance.
Must-have: In-depth knowledge of the ISMAP framework. (Experience with IRAP, SOC 2, ISO, PCI, or FedRAMP is a plus).
Language Proficiency: Fluent in Japanese and business-professional proficiency in English.
Hands-on experience with AWS and other cloud environments.
Strong interpersonal, verbal, and written communication skills; demonstrated ability to work effectively as a team player with excellent organizational and planning capabilities.

Preferred Qualifications

Professional certifications such as CISA, CISSP, or CCSK are highly preferred.
Strong understanding of common IT systems (OS, network devices, applications) and core processes (SDLC, IAM, Vulnerability Management, Backup, and DR).
Proven ability to bridge the gap between business objectives and technical requirements when communicating with management.
Strong analytical problem-solving skills with the ability to manage multiple priorities effectively.

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.