M

Mercari

Peer-to-peer mobile marketplace for secondhand goods

IT Risk & Security Member

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeMinato City, Tokyo, JapanNo salary listed

About the Job

Requirements

  • At least one of the following experience backgrounds: 1–2 years of information security or cybersecurity work at an IT company, general business company, or consulting firm; or practical experience as a security engineer, in-house systems engineer, infrastructure/network engineer, or IT product project manager while seeking to expand into security.
  • Ability to independently identify current issues, define problems, and work toward solutions.
  • Ability to read Japanese laws and write policies and documents in Japanese.
  • Basic knowledge of public cloud platforms such as Google Cloud, AWS, or Microsoft Azure.
  • Basic knowledge of IT infrastructure, including networks, servers, authentication, and endpoint management.
  • Japanese proficiency at CEFR C1 level is required.

Responsibilities

  • Develop the information security and system risk management policies, regulations, and organizational structures, and drive their ongoing improvement.
  • Assess system risks, implement mitigation measures, and monitor system risks.
  • Design, build, and document information security and system risk management processes, and continuously improve existing processes.
  • Plan and deliver internal education and awareness activities related to information security and system risk management.
  • Support financial projects from information security and system risk management perspectives.
  • Manage, analyze, and report system outages, and lead responses to security incidents.
  • Ensure security management of outsourced providers, external vendors, and external services.
  • Handle information security audits and inspections, including internal and external audits and regulatory inspections.
  • Coordinate with group risk management, compliance, product, and engineering teams on IT risk management for financial services, centered on Mercoin IT systems.
  • Depending on circumstances, take on compliance-related and other IT risk management work.

Desired Qualifications

  • Deep knowledge of information security, cybersecurity, and personal information protection law.
  • Knowledge of or operational experience with security frameworks such as ISO 27001, CIS Controls, and NIST SP 800-53/171.
  • Basic knowledge of security management tools such as SAST, DAST, EDR, and CASB.
  • Knowledge of or interest in AI/LLMs, blockchain, and on-chain technologies.
  • Security-related qualifications such as CISA, CISM, CISSP, or Japan's Registered Information Security Specialist qualification.
  • Experience with IT general controls (ITGC) or security assessments of external providers.
  • Experience creating contingency plans and conducting exercises.
  • Team or project management experience.
  • English proficiency at CEFR B2 level is preferred.

About the Company

cb

Mercari

Peer-to-peer mobile marketplace for secondhand goods

Mercari operates a mobile peer-to-peer marketplace for buying and selling secondhand goods. Users list items by taking photos in the app, and buyers complete purchases there, with payments held in escrow until receipt is confirmed. Revenue comes from seller fees (10% in Japan; 10% plus 3.6% buyer protection in the US), plus Merpay payments and promoted listings, plus shipping partnerships for integrated delivery. The platform differentiates itself through a simple mobile experience, escrow and buyer protection, shipping integration, and a broader marketplace including Mercari Shops for sellers, with a goal of extending product life and supporting a circular economy.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Tokyo, Japan
Founded
2013

Recently Posted Jobs

Explore more opportunities at Mercari

See more jobs