Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 6th largest financial group in the world. Across the globe, we're 160,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Want more jobs like this?
Get Computer and IT jobs delivered to your inbox every week.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
This is a remote position. The selected colleague will generally be expected to work at an MUFG office periodically. A member of our recruitment team will discuss location preferences with you in more detail.
Job Summary
Cyber Vice President is responsible for identifying, assessing, and monitoring cyber security risk associated with technology infrastructure and conducting assessments, testing controls, and assessing compliance with cyber-security policies and standards for technology infrastructure.
In this role you will focus on evaluating the effectiveness of security systems and processes across the company and developing and deploying any required remediation. Responsibilities include providing security consulting to business developers, system designs, and engineers; developing and implementing security assessment plans; and supporting monitoring and response tools (e.g., Qualys, App Scan, White Hat, and Varonis).
Major Responsibilities
- Defines criteria, tools, and methodologies for identifying, assessing, and monitoring the cyber
- security risk associated with technology infrastructure
- Assesses compliance to cyber security policies and standards related to technology infrastructure
- Defines testing processes for cyber security risks associated with technology infrastructure
- Conducts cyber security assessments on technology infrastructure
- Performs independent review and challenge of the front-line unit cyber security assessments and
- remediation plans on technology infrastructure
- Maintains oversight of the front-line unit remediation efforts for cyber security exposures, gaps,
- and deficiencies on technology infrastructure
- Performs independent review and challenge of front-line unit cyber-related RCSA outputs for
- technology infrastructure
- Manages and conducts independent risk assessments, vulnerability scans, and penetration
- testing results conducted on technology infrastructure
Qualifications
- Bachelor's Degree in Computer Science, Information Security, or similar area, or equivalent work experience.
- 6-8 years of progressive experience in computing and information security, including experience with Internet technology and security issues
- Experience in the banking or finance industries preferred
- Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Information Security
- Management (CISM), Certified in Risk and Information Systems Controls (CRISC) or other security certifications desired
- Cloud technology certifications in AWS, and Azure, or equivalent work experience.
- Knowledge of information security standards, rules and regulations related to information security and data confidentiality, and desktop, server, application, database, network security principles for risk identification and analysis.
- Strong MS Office skills along with strong verbal and written communication skills
- Subject matter expertise in conducting cyber security risk assessments for technology
- infrastructure
- Prior experience of management of technology infrastructure is preferred
- Experienced with vulnerability scanning and penetration testing tools and technologies
- Understanding of ITIL Service Management processes
- Knowledge of the financial services industry and its regulations / laws strongly preferred
- Understanding of control and risk management concepts and knowledge of the operational aspects of the information risk business
- Understanding of respective industry best practices (e.g., NIST, ISO, COBIT, OWASP, ITIL)
- Knowledge of risk management policies, methods, standards, processes, governance models, and industry standard risk analysis approaches
- Knowledge of current industry trends in information risk management
- Able to collaborate well with internal and external stakeholders
- Able to be a subject matter expert on assessing the maturity of cyber security practices for infrastructure
- Experience in security policy development, security education, network testing, application vulnerability assessments, risk analysis, and compliance testing required
The typical base pay range for this role is between $120K- $150K depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays.
The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.
We are proud to be an Equal Opportunity/Affirmative Action Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.
#LI-Remote