Overview
In this role you will define and govern the IT Security Risk and Control strategy for IT Security Services and Solutions within MUFG’s EMEA Technology, aligning with the broader risk framework. You will articulate risk appetites, develop KPIs and controls, and provide proactive oversight to leadership. You will narrate the department’s risk landscape to the Extended Leadership Team and ensure regulatory and policy compliance. You will foster a strong risk culture through collaboration, training, and governance excellence. This is a high-impact, cross‑functional role at a global financial group.
Responsibilities
- Oversee governance for IT Security Services and Solutions with IT Risk and external auditors
- Manage open risk issues and drive proactive remediation
- Support attestation of key controls against the Operational Risk Framework
- Lead risk reporting to the Extended Leadership Team and chair the Risk Oversight Committee
- Provide assurance on design and operating effectiveness of controls
- Collaborate with Product and Platform owners on risk for new products/processes
- Ensure regulatory compliance and incident management alignment across the department
- Assist with disaster recovery planning and control checks across Infrastructure
- Educate and lead staff on best practices and governance
- Build relationships with internal/external stakeholders to embed risk culture across the bank
Key requirements
- Extensive risk and control leadership experience in a regulated financial services environment
- Proven ability to communicate with Executives and provide decision-ready insights
- Experience with infrastructure, assets, vendor management, and incident management
- Knowledge of risk management tools (e.g., OpenPages) and regulatory frameworks (SOX, AML, data privacy, FCA)
- Experience with internal and external audits and remediation lifecycle
- Strong disaster recovery architecture experience and high-availability infrastructure
- Ability to balance strategic goals with practical risk controls
- Line management experience in a Risk and Control team
- Excellent communication and leadership
- Stakeholder relationship building
- Strategic thinking with a practical risk mindset
- OpenPages risk management tool
- COBIT and NIST 2 frameworks
- ITIL Expert
Vice President, IT Security Risk and Control in London employer: MUFG
At Mitsubishi UFJ Financial Group (MUFG), we pride ourselves on being an exceptional employer, particularly for the Coverage Associate role in London. Our commitment to fostering a collaborative and inclusive work culture empowers employees to thrive, while our focus on professional development ensures that you can grow your career within a global network. With a strong emphasis on innovation and community impact, MUFG offers a unique opportunity to make a meaningful difference in the financial sector.
