Ryosuke Hagihara
Information Security & Corporate IT
I look at risk across an organization and carry security from policy through implementation and operations myself.
Information Security & Corporate IT
I look at risk across an organization and carry security from policy through implementation and operations myself.
I'm an engineer working in information security and corporate IT. I assess risk across the organization and address the highest-risk areas first, on both the policy and the technical side.
I spent seven years at MIXI, Inc. as a software engineer and engineering manager, including a period leading security and IT at its Australian subsidiary. I then kicked off ISMS (ISO 27001) certification at an AI startup, and I now work in the systems department of an apparel manufacturer.
Having worked inside engineering teams, I'm good at bridging security policy and the people who implement and operate it.
I care about building security that operates, not security that only exists on paper.
Risk assessment, policy framework design (policy, standard, procedure), ISMS and PrivacyMark
Account management with an IdP and SCIM, inventory of SaaS and devices, SBOM-based vulnerability management, LLM-driven operational efficiency
Building monitoring, postmortems, running services on Google Cloud
Team design, redesigning development processes, working across roles
As the first corporate engineer, I set up SBOM-based vulnerability management (yamory), automated SaaS account deprovisioning through the IdP and SCIM, added email misdelivery protection (HENNGE), kept an inventory of SaaS accounts and loaned devices (Admina), and renewed the PrivacyMark certification. I also kicked off ISMS certification.
yamory case study (Japanese) / AdmiNation 2025 talk (Japanese)
At MIXI's Australian subsidiary, which ran the sports betting service betM, I led information security and corporate IT. I restructured the ISMS policies into three tiers (policy, standard, procedure) and handled local regulatory work such as AML/CTF and responsible gambling.
As group manager of the SRE organization for TIPSTAR, a keirin and auto race betting service, I ran postmortems after incidents with everyone involved, not only engineers, and worked out how to prevent recurrences.
Risk assessment, security improvements and monitoring for in-house web applications, IT asset and privileged account management, generative AI adoption for operations and services
SBOM-based vulnerability management, automated SaaS account management, PrivacyMark renewal, kicking off ISMS certification, LLM-driven operational efficiency
Led information security and corporate IT, restructured the ISMS policy framework, local regulatory compliance (AML/CTF, responsible gambling), development management for betM (until 2024)