メインコンテンツまでスキップ
Yu Sasaki

Yu Sasaki

Enterprise Security Manager / Advisor

About Me

I am an Enterprise Security specialist with a career rooted in system engineering. Starting in infrastructure and global project management at MUFG Bank, I transitioned into cybersecurity and have since built expertise across endpoint security, identity, and governance automation. I now lead security engineering at Mercari, where I focus on building "invisible security" — robust compliance that moves at the speed of engineering.

Experience

Security Leadership & Stakeholder Management

Experience leading security strategy and cross-functional initiatives in large-scale organizations. Capable of translating technical risks into business impact and driving alignment across engineering, legal, and compliance stakeholders. Background includes budget planning, organizational design, and navigating regulatory requirements in complex, multinational environments.

Zero Trust Architecture & Identity

Hands-on experience designing and implementing Zero Trust architecture using modern identity and browser security platforms. Focused on integrating device trust signals into identity and access controls to move beyond traditional perimeter-based security toward adaptive, data control, context-aware policy enforcement.

Endpoint Security & Governance Automation

Experience overseeing large-scale endpoint fleets across diverse user populations. Capable of building Security as Code workflows using IaC tools and GitOps practices, with compliance frameworks aligned to industry standards such as mSCP and NIST. Strong focus on eliminating manual operations and configuration drift through automation.

Security Engineering & Infrastructure as Code

Development experience in Python and Go applied to security orchestration and tooling. Background includes building automated workflows and integrating security controls into engineering pipelines. Committed to bridging the gap between security policy and practical engineering implementation.

Cybersecurity Strategy & Incident Response

Experience leading security initiatives including incident response, vulnerability management, and SIEM integration. Contributed to industry-wide efforts in threat analysis and cyber exercise development within financial sector information sharing communities.

Global Systems Project Management

Experience as a project manager for large-scale core-banking system overhauls, coordinating deployments across multiple regions and ensuring adherence to regulatory standards. Comfortable managing complex, cross-border projects with diverse stakeholders and tight compliance requirements.

Publications & Talks

Mercari Engineering Blog

Speaking