Hiromu M.

PayPal Inc.の子会社のリーガル&コンプライアンス部門（2025年9月からリーガル部とコンプライアンス部に分離し、後者に所属。）に所属。 Paidy が加盟する日本後払い決済サービス協会事務局員兼職（2026年5月〜） 一般社団法人日本クレジット協会（JCA）の講師資格保有及び個人情報取扱主任者認定 コンプライアンス委員会のオブザーバー（英語によるプレゼン多数経験。） 包括信用購入あっせん業者及びクレジットカード番号等取扱契約締結事業者のコンプライアンス業務全般 業務改善命令解除に内部管理体制整備等の観点から貢献 JCA調査対応（プロジェクト・タスク管理、ヒアリング対応・説明等）→「改善要請なし」に寄与 割販法、犯収法の法令等遵守 経産省・経産局立入検査準備・対応（2025年実施済） 第二線によるモニタリング・テスティング全般の企画・管理・実施担当（対象項目: 社内体制整備、委託先管理、反社排除、取引条件の表示・情報提供、支可調を含む過剰与信防止、加盟店調査・措置、債権管理、苦情処理、情報管理、クレカ番号管理、CIC、犯収法に係る事項） コンプライアンスに関するイシューマネジメント 全社員（役員、正社員、契約社員、派遣社員含。）向け及びコンプライアンス部員向けコンプライアンス（AML/CFT、割販法監督指針等）研修資料の作成及び研修の実施、理解度テストの作成（日英両方）及び管理 サンクション関連法令・措置等調査 PMO（会社全体及びリーガル&コンプライアンス本部のBAU及び特定プロジェクト（株式会社から合同会社への組織変更プロジェクト含。）の日次・週次タスク管理及びプロジェクト会議司会・ファシリテーション） 社外向け資料（広告等）、各種契約書のリーガル・レビュー 社内、部内規程、細則、マニュアル等の作成 米国親会社（PayPal）による内部監査への対応 日本後払い決済サービス協会（Japan BNPL Association）への参加 ERMの一部であるIssue Mgmtの管理 RCM (Regulatory Change Mgmt) support PCR (Product Compliance Review) Regulatory interaction recordkeeping

An Acquirer or クレジットカード番号等取扱契約締結事業者 registered with the Ministry of Economy, Trade and Industry (“METI”) under the Installment Sales Act or 割賦販売法. Scope of Work includes, but not limited to: Regulatory advisory; Regulatory monitoring; Regulatory compliance; Legal document review; Merchants screening advisory; Local privacy requirements advisory; Merchants licensing requirements research and advisory; AML advisory; JDM registration (e.g., merchant data compromise); METI/JCA reporting; Bank of Japan reporting (incoming/outgoing payments), preparing and revising manual. Japan Fair Trade Commission reporting 不当要求防止責任者 Relevant laws and regulations in which I’m in charge include the following: Installment Sales Act (ISA), Credit Card Security Guidelines, Japan Consumer Credit Association (JCA) self-regulations, Act on Protection of Personal Information (APPI), Act on Prevention of Transfer of Criminal Proceeds, Companies Act, Act against Unjustifiable Premiums and Misleading Representations, etc.

Cboe Japan is a leading PTS (Proprietary Trading System) for Japanese equities, providing members and investors with better trading opportunities at lower cost under highly transparent rules. Work at an affiliate of US-based brokerage company (Registered Type I FIBO/ Authorized PTS (equivalent to US ATS) Operator in Tokyo). Reporting to Head of Legal and Compliance. Legal -Global and local policy harmonization/integration/localization(incl. trade surveillance, privacy, AML law and all other legal/compliance-related policies) -Contract drafting and review (NDAs, Master/Individual Service Agreements, SLAs, T&Cs, Audit Engagement Agreements, subscription agreement, engagement letters/contracts, order forms, MoUs, lease agreements, green lease,) in both English and Japanese -Vendor contract management -Policy and procedure management (incl. drafting, review, revision and updating) -Research & analysis on applicable legal and regulatory amendments/revisions -Liaison with global counterparts (HK, Australia, US, etc.) -Translation of global and local policies. -Legal due diligence inquiry response. -Assisting the preparation of BoD materials -Addressing US requests (e.g., responding to and updating regular and ad hoc surveys) Compliance/Regulatory -Attending SRO (i.e., JSDA) seminars and other external events for information collection on compliance/regulatory matters -Assisting regulatory filings -Vendor trade control/ASF screening -Communicating w/ domestic/foreign service vendors -Assisting trade surveillance (e.g., Explaining Japanese regulations regarding trade surveillance to foreign surveillance service providers, conducting daily review on system-generated alerts, daily review on “material facts” for insider dealing, etc) -AML/CFT risk management (e.g., annual gap analysis) -Compliance training -Regulatory filings (FSA & JSDA)

Legal and Compliance Manager for a Registered Type II Financial Instruments Business Operator (第二種金融商品取引業者） in Tokyo. Reporting to Chief Legal and Compliance Officer. -Prepare and review contracts and other legal documents including TK (Tokumei Kumiai) agreements, master facility agreements, individual loan agreements, CAs/NDAs, standstill agreements, amendment agreements, termination agreements, deeds and other documents, statutory statements and reports (in both Japanese and English) -Fund legal affairs -Daily ad and marketing materials review -Legal opinion management (including but not limited to price negotiations, quote, executing engagement letters, correspondence with 20-30+ foreign law firms (Delaware, Nevada, UK, UAE, Bulgaria, Colombia, Costa Rica, Cyprus, Estonia, Indonesia, Kyrgyzstan, Lithuania, Mauritius, Mexico, Mongolia, Peru, Poland, Russia, Spain, etc.) research and analysis of applicable laws and regulations to our Estonian subsidiary's lending business in respective jurisdiction, periodic refresh/update) -AML / CFT screening approvals, risk assessment, annual KLB survey correspondence, etc. -Translation of legal documents (Eng to Jpn and vice versa) -PPI (dealing w/ legal and regulatory amendments) -Compliance and legal training -Regulatory reporting -Spanish documents (laws and regulations (e.g., Civil Code, Commercial Code, Penal Code), IDs, bylaws, AML/CFT policy/procedures/manuals, etc.) translation (ESP to JPN) and review for due diligence of potential investees. -Coordination with attorneys of an Estonian subsidiary.

Cryptoasset Exchange Service Provider （暗号資産交換業者） Seconded from a FinTech company since May 2018 (Concurrently held positions at securities company and IT company). -Draft/Prepare/Revise internal rules -Head of FATF Task Force -Market surveillance -KYC, CDD (incl. EDD), STR/SAR -Manage outsourcing. -Manage PPI (Protection of Personal Information). -Review advertisements. -Assist legal. -Manage trading of employees and officers. -Deal with regulators' audits and inspections. -Dealing with regulators and self-regulatory organisations (JFSA, JVCEA, etc.) on a daily basis. -Planning/Conducting compliance training for new joiners and existing employees/officers. -Point of Contact for police agencies and tax agencies. -Reporting and filing to regulators. -Conduct AML/CFT check & risk management (identification, assessment, mitigation measures) and prepare reports.

Japan's largest PTS (Proprietary Trading System) operator -Reporting Managers: Chief Operating Officer and Chief Compliance Officer. -Internal Control Manager ("Naibu Kanri Sekininsha"). -Registered as a JSDA Class 1 Sales Representative ("Isshu Gaimuin"​). -Appointed as the Person in Charge of Preventing Undue Claims from Organized Crime Groups ("Futo Yokyu Boshi Sekininsha"​) -PTS Trade surveillance -Due Diligence: KYC work (AML, CFT. FATCA, CRS-related works incl. identification of clients'​ Ultimate Beneficial Owners (UBOs)) -Research and analysis: Conducting research and analysis on domestic and foreign financial regulations (US SEC, CFTC, Japanese AML, cryptocurrency, telecommunications, general corporate laws and regulations, etc.) on a daily basis. -Regulatory Notifications and Reporting: Drafting and preparing regulatory notifications and reports to the FSA, JSDA, local finance bureau and other regulatory agencies. -Audit: Supported JSDA and Securities and Exchange Surveillance Commission (SESC) audit. -Rulemaking: Constantly drafting, revising, translating and reviewing internal rules to comply with laws, regulations and guidelines applicable to financial firms as well as correcting the previous audit findings. -Training: Regularly conducting compliance trainings to all directors and employees (including all foreign employees). -Meeting: Attending weekly compliance meetings. -Personal Information Protection Law: Created a register for personal data in accordance with laws and regulations on the protection of personal information. -My Number Law: Dealing with the "My Number"​ system: Creating new and revising existing internal rules in compliance with the laws, regulations and guidelines on "My Number"​. -Risk management: Conducting system risk assessment (incl. the development of information security and cybersecurity rules). -Outsourcing management.

HR Operations: -Reporting manager: Chief Operating Officer. -Assisting recruiting. Conducting new joiners orientation. Explaining company's benefits and rules for candidates who passed the job interviews and signed the offer letter. Compliance Officer: -Reporting manager: Chief Compliance Officer -Managing visa applications (CoEs, change of status, extension of period of stay for Engineer/Specialist in Humanities/International Services, Dependent, Designated Activities (Internship, Summer Job) etc.) for foreign employees which occupy more than 70% of the company. Acting as a representative for these employees and go regularly to Tokyo Regional Immigration Bureau. -Responsible for Company's compliance with immigration laws and regulations, labour law, personal information protection law, etc. -Revised Company's Rules of Employment and other internal rules. -Drafted various types of contracts including the internship agreement both in English and Japanese. -In charge of administrative procedures for company registry (KK Tohki) and regularly go to Legal Affairs Bureau. -Responsible for administrative procedures for safety and health management of the workplace (e.g. prepared and submitted legal documents of the appointment of Health Administrators and Industrial Physician) and occasionally go to Labor Standards Inspection Office. -Conducted compliance training to officers and employees on the observance of labour law, civil law, criminal law, corporate law, personal information protection law. -Researching and analyzing laws, regulations, and rules applicable to the company (i.e. various obligations for the company with more than 50, 100, 200, 300 or more employees) -Conducting internal investigation. Regulatory Compliance Officer: 50 % seconded to an affiliated securities company. Assisting the revision of internal rules for Japan Securities Dealers Association audit.

Cyber Policy Researcher, National Security Policy Division, Foreign Policy Bureau -Researched effective measures to cooperate against, prevent, and regulate malicious activities in cyberspace through capacity building measures, confidence building measures, and the application of existing international law to cyberspace. -Gathered and analyzed information on cyber security strategies of various states and regional and international organisations. -Attended various bilateral, regional and international conferences and meetings on cyber issues including US-Japan Cyber Dialogue, Japan-India Cyber Conference, Japan-Estonia Conference on ICT and Cybersecurity. -Assigned as the Adviser to the Group of Governmental Experts on the Developments in the field of information and telecommunications in the context of international security under the United Nations General Assembly First Committee. -Attended ICRC meeting on "Cyber warfare and jus in bello"​ in Geneva as a government expert. -Attended UNIDIR International Law and State Behaviour in Cyberspace Series Asia-Pacific Regional Seminar in Seoul as a governmental expert. -Prepared and translated speeches for the State Ministers of Foreign Affairs for various conferences. -Assisted Ambassadors in charge of cyber policy. -Translated various documents of domestic and international cyber security strategies/policies as well as the Tallinn Manual and UN cyber GGE report. -Made presentations to and discussed with various foreign officers on national security policies regarding cyber security. -Researched and analyzed information of cyber strategies of international aand regional organisations, States,organizations,etc. -Coordinated and set up various meetings with foreign officers (including ambassadors and ministers of embassies). -Drafted various documents with regard to national security. -Assisted the development of the "Cyber Security Strategy" as well as National Security Strategy.

Majored in international politics, European Union policies, the Constitution of Japan, international law and international relations.

Scholarship recipient. Researching and analyzing cyber diplomacy and international cybersecurity policy.