Security Risk Analyst

Why PlayStation?

PlayStation isn’t just the Best Place to Play — it’s also the Best Place to Work. Today, we’re recognized as a global leader in entertainment producing The PlayStation family of products and services including PlayStation®5, PlayStation®4, PlayStation®VR, PlayStation®Plus, acclaimed PlayStation software titles from PlayStation Studios, and more.

PlayStation also strives to create an inclusive environment that empowers employees and embraces diversity. We welcome and encourage everyone who has a passion and curiosity for innovation, technology, and play to explore our open positions and join our growing global team.

The PlayStation brand falls under Sony Interactive Entertainment, a wholly-owned subsidiary of Sony Group Corporation.

■Job Description

As a member of the "Information Security Tokyo Office" at one of the world's largest home entertainment/gaming companies, you will be responsible for managing and improving information security risks across the entire organization and enhancing security awareness.

Based in Japan and working as part of a global team, you will collaborate with IT and security teams in the US, Europe, and various Asian countries, primarily handling the following duties:

• Reviewing, triaging, assessing risks, and implementing responses for security-related requests from technical, engineering, and business departments.

• Conducting and supporting security assessments (due diligence) for external vendors, organizing risks, and proposing/advising on response policies based on business impact and contractual requirements.

• Appropriately communicating security risks to stakeholders, while collaborating with technical departments, related departments, and management to translate risk mitigation measures into specific actionable steps.

• Collaborating with PlayStation and various studio business departments to identify and support the implementation of information security requirements in projects and various initiatives.

• Conducting security assessments for critical systems and high-priority business areas.

While considering the business in Japan and various Asian locations, you will identify and assess security risks for a wide range of targets, from large-scale platforms to small-scale systems operated by a few people, and make appropriate response decisions. In this position, you can broaden your perspective on security while acquiring a flexible risk management mindset tailored to the business.

Specific working styles (team composition, office attendance frequency, business travel, etc.) will be explained during the interview.

■Organization/Workplace Introduction

The "Information Security Tokyo Office" is responsible for ensuring the security of game consoles and game network services sold worldwide, as well as IT systems, infrastructure, PCs, and general operations for Japan and Asian locations, while collaborating with DevOps and IT teams in the US, Europe, and various Asian countries. Each team consists of diverse members, including those from development departments and others with experience in other IT/security companies (as of April 2026, a total of 20 members). It is a global workplace where you will work not only domestically but also with development/operations teams in US/Asian locations and security teams in the US/UK.

■Required Experience/Skills

【Must】

Those who meet any of the following requirements:

・Individuals with 4 or more years of practical experience in information security duties similar to the above job description, or in the following related areas:

　o Formulation, deployment, and optimization of information security guidelines

　o Risk analysis of IT systems and formulation of improvement plans

　o Definition, design, and implementation of security requirements in collaboration with system departments

・The ability to proactively lead discussions with stakeholders regarding security requests, and to autonomously perform requirement organization, consistency checks with processes/policies, and residual risk assessment.

・A technical background in information security, including cloud infrastructure, SaaS applications, and new technology areas.

・The ability to understand technical content and communicate it appropriately to stakeholders, as well as the ability to evaluate the security environment and escalate residual risks to management.

Please note that even if you do not meet all of the above experiences, we welcome applications from those who have a strong interest in this position. We can also explain details through a casual interview before you apply.

【Want】

・Practical experience in information security areas other than those mentioned above (experience as a security engineer is particularly welcome).

・Project management experience in information security-related projects.

・Knowledge/experience in risk management regarding cloud services.

・Information security-related certifications (CISSP, CISA, CISM, etc.).

・Knowledge of security-related compliance (PCI DSS, NIST, GDPR, ISO27001, legal affairs, etc.).

■Ideal Candidate Profile

・Someone who respects the opinions of related departments and colleagues and can promote teamwork.

・Someone who considers optimal solutions not just from a security perspective, but also taking into account the business and the position of stakeholders, and enjoys that process.

・Someone who can approach tasks while proactively learning.

・Someone who can actively adopt new IT tools, including Generative AI, and continuously review and improve operations.

*We value matching the above candidate profile more than years of experience or language proficiency.

■Language Skills

【Japanese】Required

・Native-level Japanese proficiency. ・Ability to communicate with members at the Japan location (online meetings, text, etc.).

【English】Required

・TOEIC 800 or higher is desirable (score is not mandatory). ・Ability to communicate in English with teams in the US, UK, and various Asian countries (meetings, text, etc.).

Equal Opportunity Statement:

Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy or maternity, trade union membership or membership in any other legally protected category.

We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.

PlayStation is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.