fixed-term project engagement｜Senior Security & Compliance Architect

[ ABOUT TENCHIJIN ] Tenchijin Inc. is a Tokyo-headquartered space-tech company and JAXA (Japan Aerospace Exploration Agency) certified venture. Through its land-evaluation and analytics platform, Tenchijin COMPASS, the company fuses earth-observation satellite data, geospatial and environmental layers, IoT and ground-sensor feeds, and clients' operational data with proprietary AI to deliver multimodal analytics for utilities and infrastructure enterprises. Tenchijin's flagship water-infrastructure solution, KnoWaterleak, assesses pipeline deterioration and leak risk from space-derived insights and is used by a growing number of water utilities to prioritize inspection and investment, reduce non-revenue water, and extend asset life. [ ABOUT THE PROJECT ] The Global South Project is an 18-month initiative (October 2026 – March 2028) to design, build, and deploy a scalable, secure, AI-ready analytics platform tailored to utilities and infrastructure operators across Global South markets. The project adapts Tenchijin's satellite-data and GeoAI capabilities to regions facing aging or rapidly expanding infrastructure, constrained budgets, and limited field-inspection capacity — delivering risk assessment and decision-support tools that improve infrastructure management workflows. All positions are contract-based and fully remote, operating as one distributed, cross-border team with English as the working language. [ ROLE SUMMARY ] You will design and enforce the security and compliance backbone of a platform that handles critical national infrastructure data — water networks, energy assets, and utility operational records — for clients across multiple jurisdictions. Your mandate is to make security and compliance automated, auditable, and invisible to velocity: engineers ship fast, and the guardrails you build keep every deployment within SOC 2, GDPR, APPI, and regional Global South regulatory boundaries. [ Reports To ] Senior Cloud Architect / Project Executive Sponsor [ Project Language ] English (professional working proficiency or higher required) [ KEY RESPONSIBILITIES ] - Define the platform-wide security architecture: identity and access management, encryption (at rest/in transit/in use), secrets management, network segmentation, and zero-trust access patterns. - Design and implement compliance automation — continuous controls monitoring, evidence collection, and policy-as-code — targeting SOC 2 Type II readiness, GDPR, and Japan's APPI, plus applicable data-protection laws in target Global South markets. - Threat-model the platform, including satellite/geospatial data pipelines, multi-tenant boundaries, and third-party integrations with utility operational systems (SCADA-adjacent data, GIS exports, maintenance records). - Establish secure SDLC practices: dependency scanning, SAST/DAST, container image hardening, and security gates in CI/CD in collaboration with the Lead DevOps/SRE. - Own vendor and data-processing risk assessments, DPAs, and cross-border data transfer mechanisms for client and partner agreements. - Define incident response, forensics, and breach-notification procedures aligned with contractual and regulatory obligations across jurisdictions. - Run security reviews for major releases and architecture changes; train engineering teams on secure design patterns. - Support enterprise and government client security questionnaires, audits, and certifications. [ WHAT WE OFFER ] - A central role in applying satellite data and AI to real infrastructure challenges, with measurable social and environmental impact in Global South markets. - Fully remote, cross-border collaboration with senior specialists across cloud, GeoAI, product, and design. - Competitive contractor compensation commensurate with experience and scope. - Direct exposure to earth-observation technology, including data ecosystems built with Japan's space agency (JAXA). Tenchijin Inc. is an equal-opportunity organization. We evaluate all applicants on qualifications and merit, without regard to nationality, race, religion, gender, age, or disability. TENCHIJIN INC. · GLOBAL SOUTH PROJECT

- 8+ years in security engineering/architecture, including 3+ years securing cloud-native, multi-tenant SaaS platforms. - Proven delivery of compliance programs against at least two of: SOC 2, ISO 27001, GDPR, APPI, or equivalent frameworks — including automation of controls and evidence. - Hands-on experience with cloud security tooling (CSPM, SIEM, IAM policy design, KMS/HSM) across AWS/GCP/Azure. - Experience with policy-as-code and compliance automation tools (e.g., OPA, cloud-native config rules, Vanta/Drata-class platforms, or custom pipelines). - Working knowledge of international data-protection and cross-border transfer regimes. - Strong communication skills for engaging auditors, regulators, and enterprise client security teams in English.

- Experience securing critical-infrastructure or utility-sector data (water, energy, telecom). - Security certifications (CISSP, CCSP, CISM, or cloud security specialty certifications). - Familiarity with data-protection regulation in Southeast Asia, South Asia, Africa, or Latin America. - Experience working in a cross-functional POD / squad delivery model.