会社名

楽天グループ株式会社

会社概要

未来を信じ、より良い明日を創っていく。
イノベーションを通じて、人々と社会をエンパワーメントする。私たちは、そんな想いを大切に世界の人々に喜びと楽しさを届けます。
楽天は、E コマース、FinTech、デジタルコンテンツ、通信など、70 を超えるサービスを展開し、世界10 億以上のユーザーに利用されています。
これら様々なサービスを、楽天会員を中心としたメンバーシップを軸に有機的に結び付け、他にはない独自の「楽天エコシステム」を形成しています。ダイバーシティ推進は、楽天にとって最優先の企業戦略のひとつです。従業員の出身は70カ国・地域以上。世界中からユニークで多様な文化的背景や視点を持つ優秀な人材が集まり、イノベーションの原動力になっています。社内カフェテリアにはベジタリアン、ハラル対応のメニューを用意。礼拝所（Prayer room）もあります。
また、仕事と育児の両立支援や、障がい者雇用・活躍促進も積極的に推進。社内のLGBT（※1）当事者やアライ（※2）に対して、情報共有やサポート体制の強化も進めています。誰もが自分らしく力を最大限発揮して働ける。それが楽天のダイバーシティです。

70を超えるサービスを提供し、世界30カ国にサービス展開拠点を持ち、従業員の出身国・地域数は100を超え、オープンポジション制度を活用して多様なキャリアを描くことができる点も魅力です。
フレックスタイム制度、事情に応じたリモートワークの活用が可能です。本社には託児所やフィットネスジム、三食無料で利用可能なカフェテリアが併設されるなど、社員を支える環境が整備されています。

ポジション

1034924　Privacy Expert, Global Privacy - Global DPO Office, Information Security & Privacy Governance Department (ISPD) (Open)

仕事内容

Job Description:
Business Overview
The Technology Management Division (TMD) provides corporate IT, cyber security, and privacy governance to Rakuten Group companies and essential business management for technology organizations, thereby enabling innovation and strengthening its technology foundation. Within TMD, the Information Security Supervisory Department (ISSD) combines proactive cyber defense with strategic information security, privacy, and data governance to protect the company’s global assets and data.


Department Overview
The Information Security & Privacy Governance Department (ISPD) enables and accelerates business growth by establishing, maintaining, and enhancing robust information security, privacy, data, and AI governance frameworks across the Rakuten Group. We ensure Rakuten's global operations are secure, compliant, and innovative by adhering to regulatory requirements, providing comprehensive employee training, strategically managing data assets, and governing AI responsibly.


Position:
Why We Hire
At Rakuten Group, we believe privacy is more than a regulatory hurdle - it is a fundamental pillar of user trust. As our global ecosystem of services continues to expand and the landscape of global privacy law grows increasingly complex, we are building a dedicated team at the intersection of law, technology, and innovation. We are looking for passionate, challenge-driven experts who are skilled at translating complex global regulations into scalable, privacy-first solutions to join us in shaping the future of privacy compliance at Rakuten Group.



Position Details
- Respond to inquiries and requests from multiple stakeholders such as the business, products & development teams.
- Translate updates to regulations into guidelines and policies that take into consideration the dynamic nature of the Group company.
- Advise on the applicability of privacy laws and develop concepts to the specific business operations.
- Respond to data breaches and data protection authorities inquiries.
- Review privacy-related contracts.
- Draft and review privacy policies, data sharing agreements, and other legal documents.
- Conducting Privacy Impact Assessments and risk evaluations, and proposing risk mitigations.
- Develop privacy strategies in accordance with business needs.
- Drive the execution and continuous improvement of internal privacy compliance programs, policies and procedures in accordance with the development of the applicable privacy laws around the world .
- Monitor privacy developments and be able to flag and interpret the impact on businesses in scope.
- Support M&A deals including due diligence review related to data privacy matters.
- Other duties as required.

求める経験・スキル

Mandatory Qualifications:
- 3 years or more of Privacy-related work experience.
- Deep understanding of global privacy laws and practices, including the EU’s General Data Protection Regulation and familiarity with US legislation and case law. 
- Ability to read and understand laws, regulations, policies, guidelines and industry standards.
- Ability to translate legal requirements into concrete actions.
- Ability to review and draft privacy-related contracts.
- Strong critical and proactive thinking and complex problem solving skills.
- Ability to work independently and in team.
- Experience handling Data Subject Requests (DSRs) and incident response.
- Excellent English skills (TOEIC Score 800 or higher, or equivalent level) both in speaking and writing; Japanese language skills or the motivation to learn Japanese is a bonus.
- Strong understanding of ICT and Security, knowledge of System and Software Development Processes and Lifecycles.
- Degree in Law, IT or similar with a strong privacy focus.
- International work experience.

Desired Qualifications:
- Strong interpersonal skills.
- Friendly team player with a professional mind-set.
- Those who can think for themselves and take actions.
- Willing to work in a dynamic, multicultural and global environment where multilingual skills are a big asset.
- IAPP certification like the CIPP/E.
- Strong computer literacy, including the ability to navigate project management tools like Jira, privacy management tools like OneTrust or similar software is a plus.
- Basic understanding of the Common Law legal system would be a bonus for candidates with legal background.
- Social engagement will be considered a plus. 
- Experience of living/travelling/studying/working abroad.