S

Sakana AI

Orchestrates multiple LLMs via API

Security GRC Program Manager

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeTokyo, JapanNo salary listed

About the Job

Requirements

  • At least three years of practical experience in one or more of the following: cybersecurity consulting; obtaining and maintaining security certifications such as SOC 2 or ISMS; establishing and operating security risk management or risk assessment; information security or systems auditing; responding to privacy laws and regulations such as GDPR or CBPR; responding to security requirements of financial institutions or government agencies, such as FISC security standards or ISMAP; or planning, delivering, and operating employee security education and training.
  • Technical understanding of cloud systems and the ability to discuss and execute control implementation feasibility and technical risks with engineers, including hands-on implementation and verification of controls.
  • Strong written and oral communication skills, including explaining technical issues clearly to technical and non-technical audiences.
  • Ability to drive cross-functional projects through influence, organization, and thorough follow-up.
  • Ability to manage vendors, assets, procurement, and organizational technology operations with strong execution and attention to detail.
  • Business-level Japanese proficiency equivalent to JLPT N1.

Responsibilities

  • Develop security strategies, policies, and regulations, and support the CISO and executive leadership.
  • Understand legal and regulatory requirements, security certification requirements, and customer security requirements; determine risk-based control levels grounded in technical realities.
  • Support securing resources, including budgets and staffing, for security measures, and oversee outsourced services and supply-chain security.
  • Establish and improve security risk-management processes and develop security risk-response plans.
  • Promote and manage security programs and projects, including ISMS operations and company-wide deployment, with responsibility for planning, progress, budgets, and vendor management.
  • Develop rules for the management and operation of personal and confidential information.
  • Work with legal teams to translate privacy-protection requirements, including GDPR and CBPR, and cyber and digital regulations into security requirements and drive implementation.
  • Analyze and assess legal risks, including through privacy impact assessments, and create and revise internal documents such as policies and regulations.
  • Obtain and maintain security certifications such as SOC 2 and ISMS.
  • Plan and conduct risk assessments and internal audits, and develop and follow up on improvement plans based on audit results.
  • Respond to external audits from customers and other parties.
  • Automate and improve the efficiency of risk assessments and audit response, including evidence collection and control monitoring, using tools such as Vanta or Drata and scripts.
  • Plan, deliver, and evaluate employee security education and training, and create awareness materials.

Desired Qualifications

  • Technical expertise in web application development.
  • Technical expertise implementing security controls in public cloud platforms such as Google Cloud.
  • Practical experience in technical security assessments such as vulnerability assessments and penetration testing.
  • Practical experience implementing and operating compliance-management platforms such as Vanta or Drata, and automating evidence collection and control monitoring.
  • Practical experience developing AI-enabled products or services.
  • Practical experience obtaining and maintaining AISM (AI Security Management).
  • Practical experience implementing and operating IT controls related to internal controls (J-SOX).
  • Practical experience developing junior employees and supporting executives.
  • Business-level English proficiency.

About the Company

Sakana AI

Orchestrates multiple LLMs via API

Sakana AI builds AI foundation models and a multi-agent orchestration platform. Its flagship product, Sakana Fugu, runs as a single language-model interface that plans, delegates to, and combines outputs from a swappable pool of LLMs—including closed frontier models, open models, and its own instances—behind an OpenAI-compatible API. Fugu comes in two flavors: a low-latency everyday model and Fugu Ultra for tackling tough, multi-step tasks in software engineering, scientific research, and cybersecurity. The company differentiates itself by treating orchestration as a core capability to hedge against vendor lock-in and export-control shifts, using techniques like evolutionary model merging and agentic research systems. Sakana aims to provide reliable, flexible AI tooling for developers and enterprises through its API and tool integrations, while continuing to publish research on learned model orchestration.

Company size
201-500
Company stage
Series B
Total funding
$365M
Headquarters
Tokyo, Japan
Founded
2023

Recently Posted Jobs

Explore more opportunities at Sakana AI

See more jobs