Secure By Design -AVP

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

EDUCATION • Degree or equivalent work experience equally preferable CERTIFICATIONS • [Include information as needed] WORK EXPERIENCE • Previous experience in security architecture, demonstrating solutions delivery, principles, and emerging technologies, including continuous monitoring and making improvements to those solutions, working with an information security team. • Experience consulting, engineering security best practices, and implementing security principles across the organization to meet business goals and regulatory requirements, including the security considerations of cloud computing (e.g., data breaches, broken authentication, hacking, account hijacking, malicious insiders, third parties, advanced persistent threats (APTs), data loss, and denial-of-service (DoS) attacks. • Experience in Security Architecture within a highly regulated or complex financial services environment FUNCTIONAL SKILLS • Experience using Visual Basic.NET (VB.NET), Java/J2EE, ColdFusion, Application Programming Interface (API)/web services, scripting languages, and a relational database management system (RDBMS), such as Microsoft SQL Server or Oracle • Cloud security for AWS, Azure and OCI • Experience with security tools such as: Tenable, Governance Risk Management and Compliance (GRC), Nessus, CrowdStrike Falcon, Protocol Analyzers, Data Loss Prevention (DLP), Network Access Control (NAC), Security Information and Event Management (SIEM), Intrusion Prevention System/Intrusion Detection System (IPS/IDS), etc • Knowledge of NIST 800-53, NIST 600-1, Control Objectives for Information and Related Technologies (COBIT), ISO 27001/02, and the EU AI Act FOUNDATIONAL SKILLS • Communicates effectively • Identifies multiple paths to success using analytical and critical thinking as well as decision-making skills • Exercises sound judgement, prioritizes effectively, and strives for continuous improvement • Effectively collaborates with colleagues • Leverages available technology to drive efficiency and results • Understands and applies industry trends and best practices • Exhibits optimism, resilience, flexibility, and openness to others' ideas • Values learning as a lifelong professional objective • Engages inclusively and with intent • Always acts with integrity RESPONSIBILITIES • Collaborate on: • Conducting security analysis of current processes and platforms; generating ad-hoc reports for management; • Designing security models, reviewing and approving security configuration and installing firewall, VPN, routers, IDS scanning technologies, and servers, and; • Designing solutions and recommending the most suitable design packages to improve current software security levels and performance. • Conduct security awareness programs; educate and communicate to staff about information security policies, procedures, and practices • Define security-based architecture while adhering to development methodologies, engineering and coding standards. Monitor industry security updates, technologies and best practices to improve security management • Manage engineering team members on the development of system security components. Participate in the development of hardware/software/network security procedures and guidelines that support information security policies • Details: • Design, build, and implement enterprise security systems for a production environment to mitigate threats as they emerge • Align standards, frameworks, and security with overall business and technology strategy • Create solutions that balance business requirements with information and cyber security requirements • Identify security design gaps in existing and proposed architectures and recommend changes or enhancements • Use current programming language and technologies to write code, complete programming, and perform testing and debugging of applications • Train users in implementation or conversion of systems

Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organsational fit, regardless of race, religion or gender.