Apply on Employer Site

MUFG · 19 hours ago

Cyber Security Technical Advisor (GRC) – AVP

Tampa, FL

Full-time

Hybrid

Mid, Senior Level

$110K/yr - $135K/yr

5+ years exp

Mitsubishi UFJ Financial Group (MUFG) is one of the world’s leading financial groups, committed to making a difference for every client and community. The Cyber Security Technical Advisor will provide control design guidance and conduct independent assessments within the Cybersecurity GRC function, focusing on risk management and the implementation of security controls.

Financial Services

Responsibilities

Maintain a high degree of knowledge with current and proposed security changes impacting regulatory, privacy, and security industry best practice guidance, leveraging technological solutions to meet enterprise needs

Evaluate the extent to which the first line of defense is aligned with internal and external control standards, as well as regulatory and audit requirements

Provide clear and consistent communications to lines of business related to cybersecurity topics

Guide the lines of business through assessments, translating the technology/security questions so that they can be understood by the business; then guide them as to how to gather the required information

Ensure that internal controls designed to mitigate technology and cyber risks are managed, mitigated, and commensurate with the business risk

Support Information Security oversight and governance by ensuring the control environment is monitored through relevant KRI/KPIs

Ensure gaps are addressed via remediation plans with timely resolution which address root cause of control failures

Compile and distribute program level reporting to relevant stakeholders

Drive implementation, sustainability, and maturity of the firm’s Information Security control framework

Qualification

Cybersecurity risk managementCloud security practicesRegulatory knowledgeControl design guidanceProcess documentationProfessional certificationsMultitaskingAnalytical skillsCollaborationCommunication skills

Required

Minimum of 5-7 years' experience in a combination of risk management, information security, and IT roles

High technical knowledge across Cybersecurity domains such as Identity Access Management, Data Security, Configuration Management, Log Generation, Incident Response, security risk assessment/testing methodologies, Secure Software Development Lifecycle

Experience in writing process documentation and designing/executing control test scripts

Knowledge of domestic and international banking regulations (Reg W, Basel II, FFIEC, GDPR, etc.) and experience with enforcement agencies oversight activities (regulatory examinations, matters requiring attention (MRAs), consent orders, etc.) within a global systemically important financial institution's information technology and information security environments

Understanding of the regulatory environment and regulations related to technology risk, and Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB) expectations

Professional certifications such as CCAK, CISA, CRISC, CISM, CGEIT, CSX, CISSP

Ability to constructively work both independently and in collaborative environments involving all levels of management and employees

Ability to manage multiple priorities concurrently, prioritize, and efficiently complete responsibilities while maintaining the highest quality

Bachelor's degree in related IT or Information Security disciplines

Excellent analytical, organizational, and conceptual skills

Excellent oral and written communication skills