Shared Chief Information Security Officer

Job description

Join our team and start a new adventure in an international and dynamic environment, where you will be able to fulfil your career expectations in a fast-growing organization.

As a Shared Chief Information Security Officer, you will play a pivotal leadership role in strengthening the cybersecurity posture of our clients, acting as a strategic enabler while ensuring alignment with group-wide security objectives. You will provide expert guidance on regulatory landscapes, ensure compliance, and act as the trusted bridge between local operations, regional CISO communities, and group-level CISO offices. You will deliver hands-on support, manage operational controls, oversee incident response, and ensure the effective deployment of security platforms. Ultimately, you will enable our clients to innovate securely while safeguarding their reputation, data, and critical assets.

Your missions

• Provide clear status reporting on client security posture to CISO and regional leadership, including activities, risks, and compliance status
• Represent client organizations in local and regional cybersecurity communities, contributing perspectives to discussions and decision-making
• Identify and analyze business issues, key assets, and regulatory requirements; perform risk analyses and define local strategies consistent with global frameworks
• Monitor technology and regulatory developments, bringing relevant insights to clients
• Ensure full coverage of monitoring for local infrastructure and applications, specifying and adapting security platform settings and policies
• Check compliance and efficiency of system hardening, vulnerability scanning, patching, and hardening processes
• Oversee and contribute to local security incident management, including digital forensics investigations and backlog follow-up
• Conduct regular account, access, and activity reviews, and handle privilege access and exceptions at user, infrastructure, and application levels
• Schedule and launch technical audits (penetration tests, red/purple team exercises) to assess security levels
• Ensure robust reporting of cyber defense activities, including monitoring coverage, incident response efficiency, and exception rates

Your profile

• Experience in cybersecurity (minimum 10 years), with deep knowledge in network security, endpoint protection, cloud security, IAM, data protection, encryption, and security architecture
• Experience designing, implementing, and auditing organizational security controls (8–10 years), with knowledge of frameworks such as ISO 27001, NIST CSF, CIS Controls
• Experience in cyber defense operations, log monitoring, threat detection, digital forensics, and incident response
• Experience conducting technical audits, vulnerability assessments, penetration testing, and risk assessments
• Experience integrating security into enterprise projects (“Security by Design”), including risk assessments and compliance validation during SDLC (minimum 5 years)
• Experience managing or coordinating cybersecurity functions across multiple business units or subsidiaries (minimum 5 years)
• Academic background: Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field; Master’s degree or MBA in Information Security Management is highly desirable
• Japanese (native or near-native proficiency) and English (full professional fluency)
• Certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Auditor are a plus
• You demonstrate strong communication, leadership, and stakeholder management skills

What we offer

• An international community, bringing together 110+ different nationalities
• An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities
• A robust training system with our internal Academy and 250+ available modules
• A vibrant workplace that frequently gathers for internal events (afterworks, team buildings, etc.)
• At Amaris, sustainability is part of everything we do. You’ll have the opportunity to turn your ideas into action and make a tangible impact. Every day, our teams bring our ESG commitments to life, from reducing our footprint to driving positive change within our communities. Through our WeCare Together program, you’ll be empowered to design and lead projects that create real social or environmental impact, with the company’s full support.

Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.

Who are we?

Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade – this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We’re focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.

At Amaris, we strive to provide our candidates with the best possible recruitment experience. We like to get to know our candidates, challenge them, and be able to give them proper feedback as quickly as possible. Here's what our recruitment process looks like:   

Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you! 

Interviews (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!

Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem-solving scenario, etc.   

As you know, every person is different and so is every role in a company.  That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience. 
We look forward to meeting you!