株式会社天地人のfixed-term project engagement｜Senior Security & Compliance Architectの求人

[ ABOUT TENCHIJIN ]
Tenchijin Inc. is a Tokyo-headquartered space-tech company and JAXA (Japan Aerospace Exploration Agency) certified venture. Through its land-evaluation and analytics platform, Tenchijin COMPASS, the company fuses earth-observation satellite data, geospatial and environmental layers, IoT and ground-sensor feeds, and clients' operational data with proprietary AI to deliver multimodal analytics for utilities and infrastructure enterprises. Tenchijin's flagship water-infrastructure solution, KnoWaterleak, assesses pipeline deterioration and leak risk from space-derived insights and is used by a growing number of water utilities to prioritize inspection and investment, reduce non-revenue water, and extend asset life.

[ ABOUT THE PROJECT ]
The Global South Project is an 18-month initiative (October 2026 – March 2028) to design, build, and deploy a scalable, secure, AI-ready analytics platform tailored to utilities and infrastructure operators across Global South markets. The project adapts Tenchijin's satellite-data and GeoAI capabilities to regions facing aging or rapidly expanding infrastructure, constrained budgets, and limited field-inspection capacity — delivering risk assessment and decision-support tools that improve infrastructure management workflows. All positions are contract-based and fully remote, operating as one distributed, cross-border team with English as the working language.

[ ROLE SUMMARY ]
You will design and enforce the security and compliance backbone of a platform that handles critical national infrastructure data — water networks, energy assets, and utility operational records — for clients across multiple jurisdictions. Your mandate is to make security and compliance automated, auditable, and invisible to velocity: engineers ship fast, and the guardrails you build keep every deployment within SOC 2, GDPR, APPI, and regional Global South regulatory boundaries.

[ Reports To ]
Senior Cloud Architect / Project Executive Sponsor
[ Project Language ]
English (professional working proficiency or higher required)

[ KEY RESPONSIBILITIES ]

• Define the platform-wide security architecture: identity and access management, encryption (at rest/in transit/in use), secrets management, network segmentation, and zero-trust access patterns.
• Design and implement compliance automation — continuous controls monitoring, evidence collection, and policy-as-code — targeting SOC 2 Type II readiness, GDPR, and Japan's APPI, plus applicable data-protection laws in target Global South markets.
• Threat-model the platform, including satellite/geospatial data pipelines, multi-tenant boundaries, and third-party integrations with utility operational systems (SCADA-adjacent data, GIS exports, maintenance records).
• Establish secure SDLC practices: dependency scanning, SAST/DAST, container image hardening, and security gates in CI/CD in collaboration with the Lead DevOps/SRE.
• Own vendor and data-processing risk assessments, DPAs, and cross-border data transfer mechanisms for client and partner agreements.
• Define incident response, forensics, and breach-notification procedures aligned with contractual and regulatory obligations across jurisdictions.
• Run security reviews for major releases and architecture changes; train engineering teams on secure design patterns.
• Support enterprise and government client security questionnaires, audits, and certifications.

[ WHAT WE OFFER ]

• A central role in applying satellite data and AI to real infrastructure challenges, with measurable social and environmental impact in Global South markets.
• Fully remote, cross-border collaboration with senior specialists across cloud, GeoAI, product, and design.
• Competitive contractor compensation commensurate with experience and scope.
• Direct exposure to earth-observation technology, including data ecosystems built with Japan's space agency (JAXA).
  Tenchijin Inc. is an equal-opportunity organization. We evaluate all applicants on qualifications and merit, without regard to nationality, race, religion, gender, age, or disability.
  TENCHIJIN INC. · GLOBAL SOUTH PROJECT

• 8+ years in security engineering/architecture, including 3+ years securing cloud-native, multi-tenant SaaS platforms.
• Proven delivery of compliance programs against at least two of: SOC 2, ISO 27001, GDPR, APPI, or equivalent frameworks — including automation of controls and evidence.
• Hands-on experience with cloud security tooling (CSPM, SIEM, IAM policy design, KMS/HSM) across AWS/GCP/Azure.
• Experience with policy-as-code and compliance automation tools (e.g., OPA, cloud-native config rules, Vanta/Drata-class platforms, or custom pipelines).
• Working knowledge of international data-protection and cross-border transfer regimes.
• Strong communication skills for engaging auditors, regulators, and enterprise client security teams in English.

• Experience securing critical-infrastructure or utility-sector data (water, energy, telecom).
• Security certifications (CISSP, CCSP, CISM, or cloud security specialty certifications).
• Familiarity with data-protection regulation in Southeast Asia, South Asia, Africa, or Latin America.
• Experience working in a cross-functional POD / squad delivery model.