AddressDo you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 7th largest financial group in the world. Across the globe, we’re 160,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
Overview of the Department / Section:
The department covers Cyber Security, Information Security, IT Audit, IT Risks, IT Controls, Access Management, Technology Document Management, Threat Intelligence, Security Operation centre and the Portfolio for Change for all these areas.
Main Purpose of the Role:
To ensure effective management and control of TEChnology risks, liaising with all Technology departments and some business functions within the MUS international business and MUFG group as necessary.
The candidate will be expected to have close engagement with second and third line to prepare for, liaise during and follow up to closure all technology audits.
Strong leadership skills are required as this role to support engagement with all IT process areas and manage monthly audit status reporting to the senior management.
Engage with internal IT teams, external and internal audit to support the formal process for the management of ongoing audits to ensure good information flow and timely delivery of evidence required for internal and external audit closure.
Key Responsibilities:
In this role, you will be responsible for IT audit issue management and reporting across MUFG Bank & Securities business under a dual-hat arrangement. Under this arrangement, you will act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employs you.
Track and document audit issue status updates in the first line of defense through active engagement with technology owners, including internal and external issues
Track audit engagement requests for information and evidence, including internal and external e.g. SOX
Ensuring high quality responses are captured and available for frequent reporting
Organisation of issue management reporting
Liaison with 2nd and 3rd line of defence
Escalate where appropriate e.g. if a deadline is at risk
Support 1st line risk and control activities within the team where required
Main tasks
Design, document and manage the end to end technology audit process
Thoroughly plan for technology audits to ensure all artefacts are in place and people are available prior to audits
Determine weaknesses within technology that could impact audits and negotiate and track remediations
Support technology owners to document and monitor issues remediation, with action plans, using Open Pages.
Provide monthly reporting to various risk and management committees.
Develop strong relationships with technology areas to support effective communication.
Provide clear management of process and expectations with technology areas.
Direct Reports:
2
Skills and Experience:
Functional / Technical Competencies:
Technical and management background with 5+ years’ experience with the 3 lines of defense with proven IT risk/IT audit/IT governance skills required.
Ability to make sense of complex situations and rapidly prioritise issues to take effective decisions in a commercial manner.
Ability to manage multiple tasks to tight deadlines without sacrificing quality.
Ability to build relationships with stakeholders at all levels.
Ability to communicate complex information to a variety of audiences.
Ability to work on own without direction.
Has strong planning, communication (both written and oral) and presentation skills.
Able to work in a cross-cultural and cross-functional environment.
Education / Qualifications:
Certified in relevant risk or similar qualifications desired (e.g. CRISC, CISSP, CISM, CISA).
Personal Requirements:
Excellent communication skills
Results driven, with a strong sense of accountability
A proactive, motivated approach.
The ability to operate with urgency and prioritise work accordingly
Strong decision making skills, the ability to demonstrate sound judgement
Excellent interpersonal skills
The ability to manage large workloads and tight deadlines
Excellent attention to detail and accuracy
A calm approach, with the ability to perform well in a pressurised environment
Excellent Microsoft Office skills
We are open to considering flexible working requests in line with organisational requirements.
MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.
We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.
