Vice President, Senior Incident Response Analyst

MUFG is a global financial group with a long history and a commitment to integrity, diversity, and sustainable growth. Technology is responsible for the operation, development and support of all technology across all areas of the local and international business. We ensure IT strategy, architecture solutions, and service delivery align to business requirements and long-term strategy.

Main Purpose of the Role

• To ensure effective management and control of information security, IT and information risk for MUSI by ensuring appropriate Security, IT and common-sense controls are in place and evidenced across the business and IT department.
• To liaise with other information security functions within MUS international business and MUFG to ensure a consistent approach to controls, standards and policies.
• To ensure all necessary Information Security controls are in place and that a strategy to protect the firm from cyber, external and internal threats is defined and implemented.
• To develop, implement and manage compliance with IS and IT Security policies, standards and procedures.
• To support reporting requirements between Technology and internal/external bodies (e.g., auditors, management committees, regulators, Compliance, Operational Risk).

Key Responsibilities

• Operate under the Incident Response (IR) function, reporting to the IR Lead, with responsibility for leading investigations into high-severity security incidents.
• Manage and coordinate end-to-end incident response activities, ensuring timely containment, eradication, and recovery.
• Provide technical leadership and guidance to SOC and IR team members during active investigations.
• Collaborate with the Global Incident Response team to assess cross-regional impact and coordinate response efforts.
• Work with Threat Intelligence, Threat Hunting, SOC, and other cybersecurity teams to ensure efficient and effective incident handling.
• Serve as the primary technical liaison for incident status updates required by regulatory bodies, audit teams, and executive stakeholders.
• Develop, maintain, and continuously improve IR playbooks, workflows, and escalation protocols.
• Drive post-incident reviews and lessons learned sessions to enhance response capabilities and reduce future risk.
• Represent the IR function in cross-functional cyber governance and risk forums.
• Ensure all IR activities comply with applicable laws, regulations, and industry standards.
• Provide out-of-hours support as part of the IR leadership rotation when necessary.

Skills and Experience

• Dedicated experience in an Incident Response role within an established SOC environment.
• Proven expertise in threat analytics, incident triage, and response coordination across diverse attack scenarios.
• Strong hands-on experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar) for threat detection and investigation.
• Deep understanding of attacker TTPs across varied infrastructures, aligned with frameworks like MITRE ATT&CK.
• Familiarity with industry-standard incident response frameworks, including NIST, SANS, and MITRE.
• Experience in network-based and host-based threat analytics, including packet capture analysis and endpoint telemetry.
• Knowledge of security infrastructure components (e.g., firewalls, IDS/IPS, EDR) and their mitigation strategies.
• Proficiency in query languages such as Splunk SPL and CrowdStrike Query Language for threat hunting and forensic analysis.
• Excellent communication skills with the ability to translate technical findings for non-technical stakeholders.
• Understanding of international security standards and control frameworks (e.g., ISO 27001, NIST CSF, CIS Controls).

Personal Requirements

• Excellent written and verbal communication skills, with the ability to engage across technical and business teams.
• Highly results-driven with strong ownership and accountability.
• Proactive, self-motivated, with commitment to continuous improvement and learning.
• Ability to prioritize tasks and operate with urgency in high-pressure environments.
• Strong decision-making skills and sound judgment in complex scenarios.
• Structured and logical approach to problem-solving and incident analysis.
• Creative and innovative mindset, capable of adapting to evolving threats and technologies.
• Excellent interpersonal skills, fostering collaboration across teams.
• Ability to manage large workloads and tight deadlines without compromising quality.
• Exceptional attention to detail and accuracy in high-stakes investigations.
• Calm and composed under pressure during critical incidents.
• Relevant certifications such as GCIH, GCFA, GMON, or equivalent are highly desirable.

We are open to considering flexible working requests in line with organisational requirements. MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued and respected. We support equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination. We make our recruitment decisions without discrimination, in line with our commitment to identifying the right skills for the right role and our legal obligations.