**Do you want your voice heard and your actions to count?**
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 7th largest financial group in the world. Across the globe, we're 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
EDUCATION - Degree or equivalent work experience equally preferable. - Degree in information technology, cyber security, computer science, or related discipline CERTIFICATIONS - Certified in Risk and Information Systems Control (CRISC), Certified Information System Manager (CISM), Certified Information Systems Security Professional (CISSP), Lean Six Sigma or other relevant professional certifications WORK EXPERIENCE - Experience in IT security and risk management, preferably in financial services sector - Strategic planning and process improvement experience - Experience in developing and providing executive level reporting FUNCTIONAL SKILLS - Working knowledge of information security industry frameworks (i.e. National Institute of Standards and Technology (NIST) Cybersecurity Framework, Federal Financial Institutions Examination Council (FFIEC)) - Knowledge of the regulatory environment as it applies to information security within financial services industry - Proficient in developing briefing materials, administrative, and logistics support - Ability to effectively discuss security challenges with IT staff and project managers FOUNDATIONAL SKILLS - Communicates effectively - Identifies multiple paths to success using analytical and critical thinking as well as decision-making skills - Exercises sound judgement, prioritizes effectively, and strives for continuous improvement - Effectively collaborates with colleagues - Leverages available technology to drive efficiency and results - Understands and applies industry trends and best practices - Exhibits optimism, resilience, flexibility, and openness to others' ideas - Values learning as a lifelong professional objective - Engages inclusively and with intent - Always acts with integrity - Iterative problem-solving - Serving as a trusted advisor - Strong interpersonal skills - Strong organizational, critical thinking and problem solving skills - Ability to articulate key messages to a range of audiences RESPONSIBILITIES - Support the execution of cybersecurity strategy and development of a mature cyber risk management framework and its strategic roadmap, including identification of appropriate cyber metrics and their data sources that enable our stakeholders to understand our risk posture and progress - Work closely with cybersecurity teams, function owners and risk and control teams to address and drive remediation of gaps and open issues - Help to establish and manage metrics that support risk appetite and residual risk measurement and reporting to the firm's executive leadership and risk committees - Support complex, firm-wide initiatives towards successful completion and develop reports to communicate the progress to senior management, risk committees, and board of directors - Understand current cybersecurity strategy and help to mature it on a continuous basis through targeted initiatives - Collaborate with stakeholders to understand gaps and process improvements to enhance business operations - Evaluate current state business processes, from beginning to end, to identify and prioritize improvement opportunities - Analyze and measure the effectiveness of existing business processes and develop sustainable, repeatable, and quantifiable business process improvement recommendations (business requirements definition, gap analysis, cost-benefit analysis) - Recommend solutions (in terms of both technology and business outcomes) based on root cause analysis, cost/benefits, feasibility analysis, and research of sound industry practices - Leverage industry frameworks, best practices, and changes in financial services sector that may impact reporting for information security program and project developments - Stay abreast on current state understanding of information security program developments, industry frameworks, and changes in the company that may impact reporting
We are proud to practice affirmative action to diversify our workforce by engaging in the targeted recruiting of under-represented groups and are firmly committed to equal employment opportunity and to fully complying with Federal, State, and local laws that prohibit employm
