■Summary of Responsibilities:
The Technology Risk & Control Director leads the IT Risk and Controls function for MetLife Japan. This role is responsible for planning, overseeing, and managing technology risk management frameworks, controls, and compliance strategies to ensure adherence to regulatory requirements, internal policies, and global standards
The role partners closely with Japan IT leadership, Global Risk, Compliance, Internal Audit, and business stakeholders to ensure risks across infrastructure, cyber security, data, applications, and business continuity are effectively identified, managed, and remediated. The position plays a critical leadership role in enabling technology transformation while maintaining strong governance, controls, and operational resilience.
___________________________________________________________________
■Principal Responsibilities:
●Strategic Leadership & Governance
Establish and execute the strategic direction for the IT Risk & Controls function across MetLife Japan.
Define and implement a comprehensive vision for technology risk management, controls, and governance aligned with global standards.
Ensure compliance with local and global regulatory requirements, MetLife policies, and control requirements.
●Risk Management & Controls
Develop, implement, and continuously improve technology risk management frameworks, standards, and control processes.
Lead Non‑Financial Risk Assessment (NFRA) activities, partnering with Operational Risk to define the assessment universe and remediation plans.
Identify, manage, and resolve technology risks, control gaps, dependencies, and audit findings.
●Audit & Issue Management
Serve as the primary technology interface with Internal Audit, External Audit, Operational Risk, and Compliance.
Coordinate and oversee technology audits, regulatory examinations (e.g. SOX, GAAP), and internal/external control assessments.
Own remediation planning, execution, and reporting for technology risk and control issues. Develop programs to proactively assist IT in audit preparation.
Partner with IT leadership to facilitate and submit regulatory reporting related to IT.
●Stakeholder & Partner Management
Partner with Japan business leaders, IT leadership, and Global GTO stakeholders to embed risk‑aware decision making.
Collaborate with Architecture, Information Security, Infrastructure, and Data teams to proactively manage risks.
Manage key vendor relationships to ensure third‑party risk and control obligations are met.
●Technology Enablement & Ways of Working
Enable secure, compliant delivery of technology initiatives and digital transformation programs.
Support adoption of Agile ways of working across the software delivery lifecycle while ensuring strong controls.
Balance speed, innovation, and risk management in a complex, regulated environment.
●People & Capability Development
Build, develop, and sustain strong technology risk and controls capabilities.
Drive upskilling and reskilling aligned with an engineering‑led culture
Lead by example in fostering accountability, ownership, and continuous improvement