Assistant Vice President, IT Risk and Control

Do you want your voice heard and your actions to count?Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.The IT Risk, Security and Control (RSC) department works across Technology and the Business to perform Cybersecurity and Technology protection, governance, risk management and reporting. The department is made up of a number of specialist teams ultimately responsible for managing Cybersecurity and Technology risks in line with MUFG risk tolerance.IT Risk and Control (ITRC) is one team within RSC responsible for Technology risk and control management. Key responsibilities of ITRC include the risk and control framework, risk and control self-assessment (RCSA), key control testing, key risk indicators, governance and reporting and internal and external audit oversight.MAIN PURPOSE OF THE ROLETo be an integral member of the ITRC team with a primary focus on planning and executing key control testing, reporting and enhancing key risk indicators, and monthly governance and reporting, which will involve liaising with all Technology departments and some business functions and other teams as necessary.KEY RESPONSIBILITIESPerform control testing to assess the design and operating effectiveness of key cybersecurity and technology controls, and report conclusions to risk and control owners.Support efforts to sustain and enhance our risk and control framework to ensure material regulatory requirements are being assessed, tested and reported on.Manage and enhance key risk indicators that support risk appetite and residual risk measurement and reporting to the firm''s executive leadership and risk committees.Support the execution of cybersecurity and technology risk management and its strategic roadmap, including management and development of new key risk indicators to enable our stakeholders to understand risk posture.Play an active role in monthly governance and reporting activities, in particular managing materials and actions relating to the monthly ITRMC meeting.Support complex, firm-wide initiatives towards successful completion and develop reports to communicate progress to senior management, risk committees, and Board of Directors.Work closely with cybersecurity and technology teams, in particular risk and control owners to enhance control effectiveness, drive remediation and closure of open issues.Understand current cybersecurity and technology strategy and help to mature it on a continuous basis through targeted initiatives.Collaborate with stakeholders to understand gaps and process improvements to enhance business operations.Analyse and measure the effectiveness of existing business processes and develop sustainable, repeatable, and quantifiable improvement recommendations (business requirements definition, gap analysis, cost-benefit analysis).Recommend solutions (in terms of both technology and business outcomes) based on root cause analysis, cost / benefits, feasibility analysis, and research of sound industry practices.Leverage industry frameworks, best practices, and changes in financial services sector that may impact reporting for cybersecurity and technology program and project developments.Stay abreast on current state understanding of information security program developments, industry frameworks, and changes in the company that may impact reporting.WORK EXPERIENCEExperience in IT security and risk management, preferably in financial services sectorExperience in IT controls assurance and testingExperience in IT controls governance and reportingExperience in developing and providing executive level reportingCertified CRISC / CISA or other relevant qualifications desirablePERSONAL REQUIREMENTSExcellent communication skillsIdentifies multiple paths to success using analytical and critical thinking as well as decision-making skillsExercises sound judgement, prioritises effectively, and strives for continuous improvementEffectively collaborates with colleaguesLeverages available technology to drive efficiency and resultsUnderstands and applies industry trends and best practicesExhibits optimism, resilience, flexibility, and openness to others'' ideasValues learning as a lifelong professional objectiveEngages inclusively and with intentAlways acts with integrityIterative problem-solvingActs as a trusted advisorStrong interpersonal skillsStrong organisational, critical thinking and problem solving skillsAbility to articulate key messages to a range of audiencesWe are open to considering flexible working requests in line with organisational requirements.MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the ..... full job details .....