Cloud Cyber Security Assessor

MitsubishiUFJ Financial Group (MUFG) is a world‑leading financial group with 150,000 colleagues globally, committed to building long‑term relationships and fostering sustainable growth.

This role is a member of the CISO of America’s team and will provide control design guidance and conduct independent control assessments within the Cybersecurity Assessment team. The primary focus will be on testing of security controls, ensuring that technical systems and information assets are appropriately protected within both On‑prem and Cloud environments. The role also emphasizes comprehensive risk management, including the identification, assessment, and management of inherent, control, and residual risks.

• Test Execution
  • Perform walkthroughs and obtain process understanding to identify control points.
  • Execute test scripts for design and operating effectiveness using methods such as: examine, interview, test.
  • Apply sampling techniques (statistical or judgmental) to select populations for testing.
  • Conduct technical validation of controls across Identity & Access Management, Data Security, Network Security, Configuration Management, Vulnerability Management, Logging & Monitoring, Incident Response.
• Evidence Collection
  • Gather sufficient and appropriate evidence (screenshots, logs, configurations) with metadata and timestamps.
  • Ensure evidence supports conclusions and is retained per workpaper standards.
• Workpaper Documentation
  • Document test steps, attributes, results, and conclusions in a clear, self‑standing manner.
  • Maintain traceability from population to sample to evidence.
• Issue Identification
  • Record exceptions with clear linkage to criteria and risk impact.
  • Provide factual, evidence‑based observations without advisory language.
• Remediation Validation
  • Re‑test remediated controls to confirm closure and effectiveness.

• Minimum of 3-5 years’ experience in a combination of risk management, information security, and IT roles. Prior audit experience a plus.
• In‑depth knowledge of cloud security practices and technologies for major providers.
• Experience in writing process documentation and designing/executing control test scripts.
• Knowledge of domestic and international banking regulations (Reg W, BaselII, FFIEC, GDPR, etc.) and experience with enforcement agencies oversight activities.
• Understanding of the regulatory environment and regulations related to technology risk, and FCC/FRB expectations.
• Professional certifications such as CCSK, CISA, CRISC, CISM, CGEIT, CSX, CISSP and Cloud Security from major providers.
• Ability to constructively work both independently and in collaborative environments involving all levels of management and employees.
• Ability to manage multiple priorities concurrently, prioritize, and efficiently complete responsibilities while maintaining the highest quality.
• Bachelor’s degree in related IT or Information Security disciplines.

Visa sponsorship/support is based on business needs. We do not anticipate providing visa sponsorship/support for this position.

Base pay range:
New York / New Jersey $115k‑153k;
Non‑New York / New Jersey $112k‑141k, depending on experience and location. Eligible for discretionary performance‑based bonus and/or incentive compensation.

Benefits include comprehensive health and wellness benefits, retirement plans, educational assistance, training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, paid vacation, sick days, and holidays.

We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (...). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.

The above statements are intended to describe the general nature and level of work being performed.

We are an Equal Opportunity Employer and are committed to leveraging diverse backgrounds, perspectives, and experience of our workforce.