WD Cybersecurity GRC - AVP

Position: 10079845-WD Cybersecurity GRC - AVP (Open)
Do you want your voice heard and your actions to count? Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Summary:

This role is a member of the CISO of the Americas team within an embedded Cybersecurity GRC function. The AVP will support governance of the cyber risk lifecycle by monitoring execution across contributing teams, tracking status and gaps, and ensuring lifecycle records and outcomes are complete, consistent, and traceable. The role will also support the Cyber Risk Institute (CRI) Profile maturity program by coordinating with control owners, tracking assessment progress and outcomes, maintaining the maturity tracker, and preparing maturity reporting.

This role is well suited to an organized, detail-oriented cyber risk professional who is comfortable working across technical and business teams.

Primary Responsibilities:

Cyber Risk Lifecycle Governance Coordinate lifecycle activities across contributing teams, tracking status, handoffs, approvals, and open items through to closure.

Review lifecycle outcomes for completeness, consistency, and traceability, and follow up with responsible teams on gaps or delays.

Escalate missed milestones, unresolved dependencies, and process issues to management with clear context and recommended next steps.

Maintain process documentation, RACI, and procedures.

CRI Profile Maturity Support Coordinate with control owners to track completion of CRI Profile maturity assessments against program timelines.

Review assessment outcomes and maturity ratings for consistency across the program, and flag gaps or open items for management review.

Escalate overdue submissions, unresolved maturity gaps, and remediation delays to management.

Maintain the maturity tracker and remediation status, and prepare draft reporting and supporting materials for reporting submissions.

Reporting and Metrics Compile KRI/KPI data and prepare recurring status and governance reporting for GRC leadership, highlighting trends, risks, and items requiring decision or escalation.

Audit and Regulatory Support Support responses to internal audit, second line, regulatory, and other requests by coordinating with responsible teams, tracking requests to completion, and organizing the response.

Stakeholder Coordination Serve as a working-level point of contact for business, system, and control owners and contributing cyber teams, explaining requirements in clear terms and following up on deliverables.

Process Improvement Identify opportunities to streamline manual coordination, tracking, and reporting tasks, and support enhancements to GRC tooling.

Qualifications:

Experience:

4-7 years' experience in cyber risk, IT risk, GRC, or information security. Working knowledge of core cybersecurity domains such as Identity Access Management, Data Security, Configuration Management, Logging, Incident Response, and Secure Software…