Shiseido IT Security Manager

Role & Responsibilities

• Manage and secure IT security services for the Shiseido Americas region.
• Develop, support, and monitor regional and global security infrastructure programs.
• Oversee PCI and PII compliance, including QSA vendors and remediation plans and processes.
• Assess regional and global security programs, technologies, tools, architecture, network and application design, and risk policies and business considerations.
• Perform IT risk and security assessments and develop information security strategies and policies.
• Recommend solutions to assess and improve Shiseido's network security infrastructure, accounting for emerging risks and security solutions.
• Translate business needs and regulatory requirements into risk-appropriate controls, and implement security policies, standards, and guidelines.
• Develop, implement, manage, advise on, survey, and audit security programs, policies, and procedures.
• Develop security training and awareness initiatives for employees, contractors, and visitors to foster a culture of care and prevent or mitigate incidents.
• Develop metrics to measure the effectiveness and efficiency of security programs and personnel.
• Lead or provide technical support for major investigations involving security issues.
• Ensure adherence to 24x7x365 response and notification protocols for alarms, emergencies, and critical incidents.
• Analyze the complexity and feasibility of new or changed requirements.
• Maintain operational documentation, including high- and low-level designs, operations manuals, and installation guides.
• Integrate third-party security software into Shiseido, whether off-the-shelf or developed on its behalf.
• Direct daily security workflows, incident response protocols, and physical and digital security monitoring; serve as the first escalation point for critical security events.
• Partner with business departments to integrate security controls into operations and coordinate joint emergency procedures.
• Define and monitor security operations KPIs and SLAs, report regularly to senior leadership, and introduce dashboards and automated reporting.
• Supervise third-party security contractors and service providers, ensuring compliance with contractual obligations, IT security standards, and budget allocations.
• Oversee day-to-day security operations, lead the security team, and implement risk-management protocols to protect organizational assets, infrastructure, and business services.
• Bridge strategic planning and tactical execution, driving operational excellence, regulatory compliance, and cross-departmental security initiatives.
• Perform other duties as assigned.
• Plan and implement comprehensive security strategies; gather security intelligence and implement preventative measures.
• Develop work schedules, allocate tasks, and monitor personnel performance.
• Coordinate responses to emergencies and alarms and compile incident reports.
• Prepare surveillance equipment maintenance schedules and facilitate timely repairs.
• Keep abreast of new technologies and advancements in security services.
• Ensure compliance with company policies and security industry regulations.

Qualifications

• At least 7–10 years of experience working in a progressive information security operations or engineering group.
• Bachelor’s or advanced degree in Security Engineering, Computer Science, or a related field.
• Strong knowledge of application and enterprise architectures, release methodologies, project management, technical and production support, client/server applications, internet and intranet applications, and SaaS computing.
• Outstanding collaboration and team-building skills; strong written and verbal communication skills.
• Hands-on experience with firewalls and knowledge of IP networking and network security, including Intrusion Detection, DMZ, encryption, IPSec, PKI, VPNs, MPLS/VPN, site-to-site VPN tunnels, SSL/VPN, proxy services, secure SD-WAN, and DNS operations.
• Good understanding of AI Security Foundation and models, workflow security, and agentic and generative AI services, such as CoPilot, Claude, and Gemini.
• Knowledge of ZScaler Zero Trust, Palo Global Protect, and CyberArk Privilege Access is a plus.
• Extensive knowledge of PCI, PII, and data classification, including preparation, mitigation, remediation, and overall readiness.
• Knowledge of Azure cloud architecture and Landing Zone methodology.
• Cloud security and administration experience.
• Splunk experience is a plus.
• Ability to oversee SOC managed services.
• CISSP certification preferred.
• Hands-on experience with Qualys, Microsoft Sentinel, and LogRhythm desired.
• CASB experience and knowledge.
• Vulnerability management experience.
• Hands-on email and web filtering administration.
• Hands-on security investigation and analysis.
• Proven track record in an IT Security Engineering role.

Skills

Experience

At least 7–10 years in a progressive information security operations or engineering group.

Education

Bachelor’s or advanced degree in Security Engineering, Computer Science, or a related field.

Benefits

Medical, dental, and vision insurance; life and disability insurance; paid time off; paid volunteer days; paid company holidays; paid parental leave; 401(k) with 6% company match; talent development and learning programs; internal and international mobility; product discounts and annual gratis; employee-led affinity groups; tuition reimbursement; potential participation in a bonus program with the ability to overachieve.

About Cerulean

Cerulean is the definitive career portal for the global luxury industry. We match exceptional professionals with exclusive opportunities at the world's most prestigious brands. From haute couture and fine watchmaking to prestige beauty, hospitality, and boutique retail, Cerulean centralises luxury employment to help you find the career for which you were destined.