Apply on Employer Site

MUFG · 9 hours ago

Cyber Security Technical Advisor (GRC) – AVP

Tampa, FL

Full-time

Hybrid

Mid, Senior Level

$110K/yr - $135K/yr

5+ years exp

Mitsubishi UFJ Financial Group (MUFG) is one of the world’s leading financial groups, and they are seeking a Cyber Security Technical Advisor to join their CISO of America’s team. This role focuses on providing control design guidance, conducting independent control assessments, and ensuring the security of technical systems and information assets in both Cloud and on-prem environments.

Financial Services

Responsibilities

Maintain a high degree of knowledge with current and proposed security changes impacting regulatory, privacy, and security industry best practice guidance, leveraging technological solutions to meet enterprise needs

Evaluate the extent to which the first line of defense is aligned with internal and external control standards, as well as regulatory and audit requirements

Provide clear and consistent communications to lines of business related to cybersecurity topics

Guide the lines of business through assessments, translating the technology/security questions so that they can be understood by the business; then guide them as to how to gather the required information

Ensure that internal controls designed to mitigate technology and cyber risks are managed, mitigated, and commensurate with the business risk

Support Information Security oversight and governance by ensuring the control environment is monitored through relevant KRI/KPIs

Ensure gaps are addressed via remediation plans with timely resolution which address root cause of control failures

Compile and distribute program level reporting to relevant stakeholders

Drive implementation, sustainability, and maturity of the firm’s Information Security control framework

Qualification

Cybersecurity risk managementCloud security practicesRegulatory knowledgeControl assessmentProcess documentationProfessional certificationsMultitaskingAnalytical skillsCollaborationCommunication skills

Required

Minimum of 5-7 years' experience in a combination of risk management, information security, and IT roles

Prior audit experience a plus

High technical knowledge across Cybersecurity domains such as Identity Access Management, Data Security, Configuration Management, Log Generation, Incident Response, security risk assessment/testing methodologies, Secure Software Development Lifecycle, evaluating the adequacy and efficiency of internal controls; and identifying issues resulting from internal and/or external compliance examinations especially in cloud environments

In-depth knowledge of cloud security practices and technologies for major providers

Experience in writing process documentation and designing/executing control test scripts

Knowledge of domestic and international banking regulations (Reg W, Basel II, FFIEC, GDPR, etc.) and experience with enforcement agencies oversight activities (regulatory examinations, matters requiring attention (MRAs), consent orders, etc.) within a global systemically important financial institution's information technology and information security environments

Understanding of the regulatory environment and regulations related to technology risk, and Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB) expectations

Professional certifications such as CCAK, CISA, CRISC, CISM, CGEIT, CSX, CISSP

Ability to constructively work both independently and in collaborative environments involving all levels of management and employees

Ability to manage multiple priorities concurrently, prioritize, and efficiently complete responsibilities while maintaining the highest quality

Bachelor's degree in related IT or Information Security disciplines

Excellent analytical, organizational, and conceptual skills

Excellent oral and written communication skills