SAP Senior Information Security Compliance Specialist 

Japan, Ota 

4308862

We are building a new
DORA Compliance Governance Teamto ensure our organization meets the Digital Operational Resilience Act (DORA) requirements. The team is structured around three core pillars: Regulatory Engagement & Lead Overseer Coordination, Regulatory Governance & Product/Service Enablement, and Regulatory Reporting, Audit Readiness & Communication.
This role is part of the Regulatory Governance & Product/Service Enablement pillar, which focuses on developing and implementing DORA compliance policies, ensuring that products and services meet regulatory requirements, and advising product, engineering, and GPO teams on best practices for digital resilience. Join us to drive internal governance, define compliance standards, and support teams in embedding resilience into our products and services.

As a Senior Information Security Compliance Specialist, you will play a crucial role in ensuring our organization meets DORA regulatory requirements through strong governance and product/service enablement. You will be responsible for developing compliance policies, advising on regulatory integration, and driving digital resilience within our products and services. You will collaborate with cross-functional teams, including product management, engineering, and supplier management, to embed compliance at every level of our operations.

What you`ll do:

• Develop and implement DORA compliance policies, standards, and frameworks.
• Ensure product and service compliance by advising engineering and product teams.
• Provide expert guidance on integrating regulatory requirements into development processes.
• Define best practices for digital resilience and security compliance.
• Support internal governance and policy definition to drive regulatory adherence.
• Advise GPO on integrating regulatory TPRM (Third-Party Risk Management) requirements with suppliers.
• Work closely with internal stakeholders to establish clear compliance roadmaps.
• Conduct impact assessments and risk analysis related to DORA requirements.
• Collaborate with audit, risk, and compliance teams to ensure readiness for regulatory reviews.
• Monitor regulatory developments and translate them into actionable compliance strategies.

What you bring:

• 3+ years of experience in information security compliance, regulatory governance, or risk management.
• Preferred qualifications: In-depth understanding of DORA, financial regulations, and compliance frameworks such as ISO 27001, ISO 22301.
• Know-how and experience with risk management or third-party risk management is an advantage.
• Background in financial services, cloud security, or enterprise software development. Cybersecurity certifications such as CISSP, CISM, CISA, or equivalent are an advantage.
• Proven experience in developing and implementing compliance policies and standards.
• Familiarity with product development and cloud operations processes and ability to advise engineering teams on regulatory requirements.
• Experience collaborating with auditors, regulators, and external stakeholders.
• Strong analytical and problem-solving skills to interpret and apply complex regulatory requirements.
• Excellent communication and stakeholder management skills to work effectively across cross-functional teams.
• Ability to work independently in a fast-paced, regulatory-driven environment.

​

Job Segment:Information Security, Cloud, ERP, Risk Management, Compliance, Technology, Finance, Legal