About Information Security Team
Our mission is to create and maintain a secure foundation for Bridgestone to continue serving society with superior quality and trust in a digital and evolving world. We will Identify, Detect, Protect, Respond and Recover from cyber-attacks, ensuring the Confidentiality, Integrity, Availability and Safety of our team-mates, information, and systems.
Years of Experience : 8 Years
Key Responsibilities:
* Support the definition and execution of Information Security Governance & Compliance strategy, including roadmap development, technology enablement, vendor support, and program maturity initiatives.
* Lead and coordinate day-to-day governance activities.
* Develop, maintain, and improve security policies, standards, procedures, and control libraries.
* Support compliance assessments, audits, and governance reviews across regulatory and industry frameworks.
* Produce reporting, metrics, and executive presentations for leadership.
* Support implementation and continuous improvement of governance, risk, and compliance platforms and security controls.
* Foster strong relationships with business and IT stakeholders to embed security and compliance requirements into operational processes.
Technical Skills :
* Strong understanding of Information Security Governance, Risk, and Compliance (GRC) principles and practices.
* Experience with security frameworks and regulations, including NIST CSF, NIST 800-53, ISO 27001, CIS Controls, PCI-DSS, GDPR, SOX, and GLBA.
* Experience developing and maintaining policies, standards, procedures, controls, and compliance documentation
Soft Skills :
* Strong verbal and written communication and interpersonal skills. (in English)
* Excellent troubleshooting and problem-solving skills
* Solid business acumen; understands how Information Security supports business objectives.
* Comfortable dealing with ambiguity and working through change.
* Works well on a team; supplemented by the ability to work with minimal supervision.
Educations and Qualifications:
* Bachelor's degree in information technology, Computer Science, or a related field.
* Preferred certifications: CISSP, CISM, CISA, CIPP, CRISC, CGEIT, GRCP, Security+, or equivalent governance, risk, and compliance certifications.
