[Japan] Cybersecurity Architect, Global Information Security

Job description

Santenは、眼科領域に特化したグローバル製薬企業として、世界中の人々が「見る」ことを通じて、より豊かで幸せな人生を送れるよう、目の健康の維持・向上に取り組んでいます。 1890年に日本・大阪で創業して以来、135年以上にわたり、眼科領域における医薬品および医療機器の研究開発・製造、および販売を通じて、世界中の人々の目の健康をサポートしてきました。 Santenは眼科領域を専門とし、緑内障、ドライアイ、感染症、アレルギー、加齢黄斑変性、近視など、幅広い疾患領域に対応する製品ポートフォリオを有しています。 Job’s mission Under the direct supervision of the Cybersecurity Senior Manager, with oversight and guidance from the Global Head of Information Security, the job holder is part of the Global Information Security Function (Digital & IT Division), responsible for execution of Global Cyber Defense Strategy, implementation of technical solutions to defend Santen from cyberattacks, running risk assessments of all new global solutions, managing the risk and vulnerability management process (both Information Systems and Industrial Control Systems), developing and maintaining the organization's security architecture, which is in line with security regulations, standards and best practices, managing the SOC (Security Operations Center) partner in order to ensure that information assets are adequately protected and compliant as well as maximize the benefit of information systems for Santen’s global businesses. Translate cyber risks, threat intelligence, regulatory requirements and business requirements into scalable security architecture, technical standards and security capabilities. Provide security architecture leadership for emerging technologies including AI/Generative AI and ensure that cybersecurity enables digital innovation while protecting Santen's critical business operations, information and manufacturing capabilities. Number of direct subordinates No direct subordinates as of the recruitment date however there will be several Digital & IT members and external consultants whose activities need to be coordinated by this role within the framework of cybersecurity projects or processes. Key Responsibilities & Accountabilities Cybersecurity Defense & Management According to the company’s long-term vision, execute the cybersecurity strategies by collaborating with cross-functional teams to design and implement secure infrastructure and application solutions Understand expectations of the company with regard to continuous growth, establish concrete goals, and create mid-term strategies to achieve goals Drive the Global Cyber Defense Strategy, maintain ready forces and capabilities to conduct cybersecurity operations (Santen’s Global SOC) Anticipate future internal and external trends and implications and create appropriate cybersecurity measures Build understanding of cyber threats in each level. Develop detection & protection measures continuously, lead the technical solution implementations to be prepared to defend Santen from disruptive or destructive cyberattacks Enterprise Security Architecture & Governance Define and maintain Santen's enterprise security architecture principles, reference architectures, patterns and technical security standards. Improve Santen’s cybersecurity maturity level by increasing overall awareness and providing security advice/insights on technical requirements both to technical and non-technical leaders (Information Systems and Industrial Control Systems global leaders) Act as Security Architect in global program & project implementations, planning the delivery of risk mitigation solutions and answering technical questions, reviewing current security measures, recommending enhancements, and identifying areas of security weakness Perform technical risk assessments (IT & OT) of all new global solutions and third parties, identify potential gaps and make sound recommendations for mitigating the risks on a global scale Perform ongoing security maturity level assessments (Application Advisory Board Reviews and Critical 3rd Party Assessments such as; SOC Vendor, Infra Support Vendors) to evaluate the effectiveness of security controls and explain the effectiveness to project teams, business stakeholders and senior management Implement the Internal Cybersecurity Framework to support the state-of-art technologies and Santen regulatory and organizational requirements (ISO 27001, NIST, Data Privacy Laws) Identify architectural security debt and drive prioritized remediation with DIT members. Security Incident Management Ensure the security incident management process are executed properly by regional Infra leads by tracking the resolution process and making sure the known issues are addressed according to risk management methodology Conducts log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources Correlates activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity Correlates network, cloud and endpoint activity across environments to identify attacks and unauthorized use Supports the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results and making changes necessary to address deficiencies Reviews alerts and data from sensors, and documents formal, technical incident reports Manage the monthly operational meetings between SOC team and Santen, improve the overall process and ensure the KPIs are achieved Vulnerability & Exposure Management Lead the evolution from traditional vulnerability management toward risk-based exposure management considering vulnerabilities, asset criticality, exploitability, threat intelligence, attack paths and compensating controls. Coordinate vulnerability remediation, compensating controls and risk acceptance. Implement and improve the Global Vulnerability Management Program focused on reducing the risk presented by vulnerabilities in Santen environment by continuously performing three core steps; Discovery, Reporting and Remediation Guide the technical teams (Global Infra, Regional Infra and Application teams, critical third parties) to make sure vulnerabilities are mitigated on a timely manner Manage the global vulnerability scan and penetration test exercises Insider Threat & Insider Risk Management Define and continuously improve Santen's insider threat and insider risk management capabilities. Establish risk-based monitoring, detection and investigation capabilities for unauthorized access, data exfiltration, privilege misuse and other insider risks. Coordinate technical investigations across identity, endpoint, cloud, application and data environments in collaboration with Legal, HR, Compliance and Privacy stakeholders. Translate investigation findings and emerging insider threats into improvements in security architecture, access controls, monitoring and data protection. Define relevant metrics to measure insider risk exposure and the effectiveness of preventive, detective and responsive controls. Cyber Resilience Design security architecture to minimize the business impact of disruptive cyberattacks. Define cyber resilience requirements for critical business and OT systems. Support development of cyber recovery strategies including isolation, alternate operations and secure restoration. Validate resilience through exercises, simulations and recovery testing. Threat Intelligence Determine the need for covering the risks on company’s threat landscape and continuously search for the most strategic product & services to deliver the needed capabilities Keep track of changes in Santen’s business, threat landscape, product innovations and  rebalance accordingly Build close partnerships and implement efficient internal processes with business and technical teams to detect and mitigate threats before they can be exploited Education Bachelor's degree in Business, Computer Sciences, Engineering, or related field Relevant Cyber security certifications (CISSP, CISM, CISA, CompTIA Security+ or X, CEH, Registered Information Security Specialist, etc.)