Assistant Vice President - Secure by Design, GRC Specialist

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

MUFG, a globally respected financial institution, is seeking an Assistant Vice President to join their Secure-by-Design Team within the Digital Engineering Services and Solutions department in London. This pivotal role sits at the heart of MUFG’s IT Risk, Security & Control function, where you will play a crucial part in safeguarding the organisation’s technology landscape across both banking and securities business lines. You will be empowered to drive secure-by-design processes, ensuring that all digital engineering projects meet rigorous security standards while collaborating with diverse stakeholders. MUFG offers a supportive environment that values integrity, professionalism, and teamwork, providing you with opportunities for personal growth and development. With flexible working arrangements, access to training programmes, and generous pension contributions, this is your chance to make a meaningful impact in a company committed to excellence and innovation.

• Join a global leader in financial services with a strong commitment to cyber security and risk management, offering you the opportunity to work on high-impact projects across banking and securities divisions.
• Benefit from flexible working opportunities, ongoing training programmes, and generous pension contributions as part of MUFG’s dedication to employee wellbeing and professional development.
• Work in an inclusive and collaborative environment where your expertise in IT security will be valued, supported by knowledgeable colleagues and growth-focused leadership.

What you'll do: 

As Assistant Vice President Secure-by-Design Digital Engineering Services and Solutions at MUFG, you will be entrusted with overseeing secure-by-design activities across complex technology portfolios. Your day-to-day responsibilities will involve engaging with stakeholders from both business and technology functions to conduct thorough assessments of IT security controls. You will develop robust testing strategies tailored to each project’s unique requirements, ensuring that all digital engineering initiatives comply with global information security standards. By reviewing evidence and drawing informed conclusions about control effectiveness, you will help identify potential risks or gaps that require remediation. Your ability to manage multiple tasks efficiently will be essential as you balance project timelines with meticulous attention to detail. Additionally, you will play a key role in coaching team members through knowledge sharing sessions while preparing comprehensive reports for senior management. Success in this role hinges on your capacity to collaborate effectively across departments, maintain entity-neutrality under the dual-hat arrangement, and uphold MUFG’s values of integrity, professionalism, and teamwork.

• Manage secure-by-design team activities across the Digital Engineering Services and Solutions department for both MUFG Bank and Securities EMEA plc under a dual-hat arrangement.
• Deliver secure-by-design processes to ensure all relevant technology projects undergo comprehensive security review prior to implementation.
• Interview business and technology stakeholders responsible for technical and non-technical controls to assess compliance with IT security policies.
• Review reports and conclusions, ensuring suitability of evidence required to demonstrate operating effectiveness of controls.
• Develop testing strategies for evaluating the operating effectiveness of security controls within infrastructure and service operations.
• Arrive at informed conclusions regarding gaps in control operating effectiveness, documenting risks, findings, and recommended actions.
• Manage your time efficiently to ensure testing is completed within project deadlines while maintaining high standards of accuracy.
• Coach team members through knowledge transfer sessions and constructive feedback to foster skill development within the team.
• Collaborate closely with senior stakeholders across multiple departments to provide assurance for cybersecurity technologies, policies, standards, and procedures.
• Prepare detailed documentation of risks, gaps, findings, and recommended actions for management reporting.

What you bring: 

In the Assistant Vice President Secure-by-Design Digital Engineering Services and Solutions role at MUFG you will bring proven experience managing complex tasks within cyber security environments requiring broad scope adaptability sensitivity to ambiguity. Your deep understanding of information IT security domains—ranging from governance identity access management threat intelligence asset management risk assessment incident response vulnerability patch management—will enable you to deliver effective assurance across diverse technology portfolios. Technical expertise spanning infrastructure network database platforms cloud storage desktop systems applications is essential for evaluating control effectiveness within digital engineering projects. You should have hands-on experience providing assurance for cybersecurity technologies using recognised frameworks such as SOX FFIEC ISO27001 NIST Cloud Security Alliance PCI-DSS coupled with practical exposure as an IT auditor security auditor or GRC analyst. Your interpersonal skills are critical; you must excel at stakeholder engagement management reporting coaching team members through knowledge transfer sessions constructive feedback. A degree-level education or equivalent experience is required ideally supported by industry certifications like CISA CRISC CISM CISSP. Strong presentation documentation reporting abilities are vital for communicating risks findings recommendations clearly accurately.

• Experience managing multiple tasks with broad scope and ambiguity within IT risk or cyber security environments.
• Demonstrable proficiency in information IT security domains such as Security Governance, Identity & Access Management, Threat Intelligence, Asset Management, Risk Management, Security Assessment/Testing, Incident Management, Vulnerability & Patch Management.
• Technical knowledge spanning Infrastructure, Network, Database Platforms, Cloud Storage Desktop systems and applications relevant to digital engineering services.
• Proven experience providing assurance for cybersecurity technologies including policies standards procedures frameworks such as SOX FFIEC ISO27001 NIST Cloud Security Alliance PCI-DSS.
• Ability to coach team members through knowledge transfer sessions constructive feedback fostering skill development within the team.
• Excellent stakeholder management skills demonstrated through senior stakeholder engagement management reporting across multiple departments.
• Experience working as an IT auditor security auditor or governance risk compliance analyst applying best practice approaches to security assurance frameworks.
• Broad knowledge of computer networking IT security systems including operating systems databases firewalls SIEM DLP etc.
• Degree educated or equivalent experience ideally complemented by relevant certifications (e.g. CISA CRISC CISM CISSP).
• Strong presentation documentation reporting skills enabling clear communication of risks findings recommendations.

What sets MUFG apart: 

MUFG stands out as one of the world’s leading financial institutions renowned for its unwavering commitment to integrity responsibility professionalism teamwork client-centricity people focus innovation simplification execution excellence. The organisation fosters an inclusive culture where every employee is encouraged to listen up speak up challenge themselves grow share ideas collaborate support one another. Working at MUFG means joining a dependable network of knowledgeable professionals who value communal success over individual achievement offering flexible working opportunities generous pension contributions ongoing training programmes supportive leadership growth pathways. Employees benefit from a nurturing environment that prioritises wellbeing personal development career progression while maintaining high standards of ethical conduct regulatory compliance operational resilience. MUFG’s dual-hat arrangement provides unique exposure across banking securities businesses allowing you to broaden your skillset contribute meaningfully entity-neutral basis without favour ensuring legal entity integrity regulatory adherence throughout your tenure. The company’s commitment extends beyond business results embracing EMEA cultural principles client centricity people focus innovation simplification ownership execution making it an exceptional place for talented individuals seeking impactful rewarding careers in cyber security digital engineering services solutions.

What's next:

If you are ready to take your career forward in a collaborative inclusive environment where your expertise will make a real difference apply now!

Apply today by clicking on the link provided.

We are open to considering flexible working requests in line with organisational requirements.

MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.

We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.