Assistant Vice President, IAM Governance

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

MUFG, one of the world’s leading financial groups with a rich heritage spanning over 350 years, is seeking an Identity and Access Management Governance Manager at Assistant Vice President level to join their IT Risk division in London. This pivotal role offers you the opportunity to shape and oversee the governance of identity and access management processes, ensuring robust risk management and compliance across a multi-year remediation programme. You will be instrumental in supporting the delivery of effective controls, collaborating with diverse teams, and engaging with stakeholders at all levels. The organisation is committed to nurturing talent, fostering shared growth, and building a fair, transparent culture where integrity and responsibility are at the heart of everything they do. With flexible working opportunities, generous training support, and a truly international network, this is your chance to make a meaningful impact within a respected financial services environment.

• Join a globally recognised financial institution with a rich history and extensive international presence, offering unparalleled opportunities for professional development and cross-border collaboration.


• Play a key role in shaping the future of identity and access management governance by supporting critical remediation programmes and ensuring compliance with regulatory standards.


• Benefit from a supportive leadership team, inclusive workplace values, flexible working arrangements, and ongoing training opportunities designed to help you grow your career.

What you'll do:

As an Identity and Access Management Governance Manager, you will play an essential role in overseeing risk management frameworks related to identity and access controls. Your day-to-day responsibilities will involve collaborating with various teams to define robust controls, developing monitoring strategies that provide transparency into performance metrics, coordinating remediation efforts across business units, and preparing detailed reports for governance meetings. You will also facilitate stakeholder engagement in managing toxic combinations within applications, act as a liaison for audit-related activities, address risks within development lifecycles, and ensure that all participants adhere to established standards. Success in this role requires you to be highly organised, delivery-focused, adept at simplifying complex concepts for both technical and non-technical audiences, and able to foster partnerships across diverse groups. Your ability to communicate clearly, build consensus among stakeholders, and maintain meticulous attention to detail will be crucial as you help drive continuous improvement in IAM governance.

• Work closely with the wider Identity and Access Management (IAM) team and other control functions to define key controls for IAM processes, ensuring alignment with audit and regulatory requirements.


• Design effective strategies for continuous control monitoring by developing Key Control Indicators (KCIs) and Key Risk Indicators (KRIs) that assess performance across IAM controls.


• Assist in creating formal testing strategies for IAM controls, collaborating with technical teams to ensure thorough evaluation and remediation.


• Monitor progress on remediation initiatives by partnering with technology and business application owners to ensure commitments are met throughout the programme lifecycle.


• Coordinate the Toxic Combination framework by facilitating full participation from business and technology stakeholders, ensuring violations are managed appropriately.


• Prepare comprehensive management information reports for IAM Governance meetings, transparently communicating process performance and escalating issues as needed.


• Act as a point of contact for addressing IAM risks within the Software Development Lifecycle (SDLC), ensuring risks are mitigated effectively.


• Engage proactively with internal and external audit teams regarding identity and access management risks, providing clear communication and documentation.


• Support the design and delivery of remediation programmes to ensure key risks are addressed efficiently while maintaining compliance with industry standards.


• Facilitate clear communication between organisational functions, business units, and offices both locally and internationally to promote understanding of IAM governance.

What you bring:

Your proven track record in identity and access management within financial services will enable you to bring valuable insights into risk mitigation strategies. You possess deep familiarity with regulatory expectations around technology risk—including audit cycles—and have demonstrated your ability to leverage best practice frameworks like NIST or SOX. Your experience spans both technical competencies (such as developing monitoring indicators or automating data production) as well as interpersonal skills: you excel at building relationships across business units, facilitating clear communication between local and international teams, and presenting complex information concisely. As someone who thrives in collaborative environments, your attention to detail ensures accurate reporting while your strategic thinking helps drive continuous improvement. Your educational background supports your technical expertise; professional certifications further enhance your credibility. Above all, your commitment to fairness, transparency, empathy towards colleagues’ perspectives, dependability under pressure, sensitivity when delivering difficult messages—and enthusiasm for sharing knowledge—will set you apart as an ideal candidate for this position.

• Demonstrable experience within an Identity and Access Management function in a regulated financial services environment is essential for success in this role.


• At least three years’ experience in technology-focused risk or control functions provides you with the foundation needed to understand complex operational challenges.


• Working knowledge of banking or securities products enables credible engagement with application owners on topics such as toxic combinations or segregation of duties.


• Proven understanding of Information Security and Technology Risk management practices ensures you can apply these domains effectively within financial institutions.


• Strong technical knowledge of external laws, regulations (including SOX), policies, frameworks such as NIST or DORA relevant to technology risk is required.


• Experience developing continuous control monitoring strategies—including automation of reporting—demonstrates your commitment to efficiency.


• Ability to develop effective control testing strategies shows your skill in evaluating risk mitigation measures thoroughly.


• Excellent written and verbal communication skills allow you to simplify complex concepts for diverse audiences.


• Educated to degree level; CISSP or CISM qualifications are desirable but not mandatory.


• Meticulous attention to detail combined with strong organisational skills ensures accuracy in reporting and process oversight.

What sets this company apart:

This organisation stands out as one of the world’s most respected financial institutions thanks to its long-standing commitment to integrity, responsibility, fairness, transparency, honesty—and shared growth. Employees benefit from being part of an international network spanning over 50 countries; this global reach creates unique opportunities for personal development through cross-border collaboration. The company’s vision centres on nurturing talent: it invests heavily in training opportunities so individuals can stretch themselves professionally while enjoying flexible working arrangements that support work-life balance. The culture is inclusive—valuing diversity of thought—and supportive leadership ensures everyone feels connected within their team. By prioritising ethical behaviour alongside sustainable growth objectives for society at large, this employer offers a workplace where you can make a real difference while advancing your career within a knowledgeable community dedicated to excellence.

What's next:

If you are ready to take the next step in your career by joining a globally respected institution where your expertise will be valued—apply now!

Apply today by clicking on the link provided.

We are open to considering flexible working requests in line with organisational requirements.

MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.

We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.