Latest AI JobsBrowse Jobs
xAI logo

Sr. Security Engineer - GRC APAC Fintech & Financial Services

xAITokyo, JapanInformation Security
Apply on company site
Salary
Not listed
Job type
Full-time
Experience
Senior · 8+ yrs
Posted
9 Oct 2026
Status
Open · checked 7d ago

About this role

This role suits an experienced governance, risk, and compliance professional with a deep background in Japanese financial regulations who wants to build automated compliance systems in Tokyo. The position is a full-time opportunity based in Tokyo, Japan, aimed at individuals with strong technical engineering skills who can balance regulatory standards with high-growth business needs.

Role Overview

The Senior Security Engineer for GRC APAC Fintech and Financial Services at xAI focuses on Japanese information security and financial services regulation. The position involves scaling compliance programs for the organization and X Money as operations expand into the regulated Japanese market. Responsibilities include building automated trust systems, establishing Compliance-as-Code capabilities, and aligning technical controls with local banking and payment requirements.

Key Responsibilities

Own and evolve the Japan financial services and payments compliance posture across JFSA supervisory expectations and APPI standards.
Build and maintain Compliance-as-Code capabilities, including policy-as-code and automated control validation integrated into CI/CD pipelines.
Operate and extend GRC platforms like Vanta as the central backbone for control mapping and evidence management.
Partner with engineering teams to integrate JFSA and APPI requirements into system designs at an early stage.
Design, implement, and validate technical controls for Japanese banking and payments environments covering access control, logging, encryption, and business continuity.
Operate the cybersecurity and compliance risk register by identifying and tracking risks under JFSA supervisory expectations.
Lead risk assessments and compliance reviews for new products, payment flows, features, and vendors.
Liaise with Legal and Data Privacy teams regarding APPI intersections and incident reporting.
Cultivate relationships with external auditors, assessors, and JFSA supervisory contacts.
Develop and improve policies, standards, and procedures mapped to local banking and payments technology requirements.

Requirements

Bachelor's degree in computer science, Information Security, Cybersecurity, risk management, or a STEM field, or equivalent practical experience.
At least 8 years of experience owning or operating a GRC, information security compliance, or ISMS program in fintech, banking, payments, SaaS, or regulated technology environments with primary Japan exposure.
Demonstrable experience operating an ISMS and supporting external audits or regulatory evidence processes.
Hands-on experience implementing or operating controls related to JFSA supervisory expectations and local Japanese banking and payments technology.
Strong understanding of information security risk management, control assessment, and governance reporting.
Experience coordinating security incident response governance and third-party security assurance.
Working knowledge of APPI sufficient to partner with Privacy counterparts.
Technical fluency to partner with Engineering on cloud environments, identity, logging, and secure SDLC.

Nice to Have

10+ years of information security compliance, GRC engineering, or technology audit experience with a primary Japan focus.
Hands-on experience implementing technical controls and integrating compliance checks into CI/CD and DevSecOps pipelines.
Familiarity with secure SDLC practices including threat modeling, SAST, DAST, and dependency scanning.
Experience enabling enterprise sales through trust centers and vendor questionnaires.
Experience supporting business continuity, disaster recovery, and resilience evidence.
Certifications such as CISSP, CISM, CISA, or CRISC.
Prior experience working within JFSA-supervised financial institutions or fintechs in Japan.
Japanese language proficiency.

Skills and Tools

Vanta
AWS
GCP
Azure
Compliance-as-Code
CI/CD pipelines
DevSecOps
APPI regulations
JFSA supervisory frameworks

About the Company

xAI operates with a small, highly motivated team focused on engineering excellence and a flat organizational structure. The mission is to create artificial intelligence systems that accurately understand the universe and aid humanity in acquiring knowledge. Employees are expected to be hands-on, contribute directly, and demonstrate a strong work ethic with effective prioritization.

How to Apply

Interested candidates should apply directly on the official company careers page.

Skills and tech stack

VantaAWSGCPAzureCompliance-as-CodeCI/CDDevSecOps

Questions candidates ask

Where is the position located?

The position is located in Tokyo, Japan, and may require occasional travel.

What level of experience is required for this role?

Candidates must have at least 8 years of experience owning or operating a GRC, information security compliance, or ISMS program in regulated technology environments.

What educational background is expected?

A Bachelor's degree in computer science, Information Security, Cybersecurity, risk management, or an engineering/STEM field is required, or equivalent practical experience.

Are professional certifications preferred?

Yes, certifications such as CISSP, CISM, CISA, CRISC, or equivalent are preferred.

Is language proficiency in Japanese required?

Fluency in English is required, while Japanese language proficiency is considered a plus.

Ready to apply?

The application is on the official xAI careers page.

Apply on company site