Vice President, Risk and Control - Digital Engineering

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

• Accountable for defining, creating and governing the Digital Engineering Risk and Control strategy in accordance with the wider EMEA Technology IT Risk and Control vision and strategy and risk appetite
• Accountable for defining the Digital Engineering Solutions and Services risk appetite and framework in accordance with the overall Technology departments risk appetite and tolerance framework, managing the departments operational, regulatory and financial risk
• Define and evolve the Digital Engineering Services and Solutions Key Risk Indicators’ and Controls and govern accordingly
• Present the department’s risk landscape, providing proactive oversight and prioritisation to ensure timely closure of issue
• Run the departments Risk/Control/ Audit monthly forum committee presenting high quality risk reports and insights to Head of Digital Engineering Services and Solutions and the Extended Leadership Team
• Responsible for providing visibility of the Extended Leaderships Teams EOL roadmap, the departments position and Product Owners remediation plan and progress
• Primary contact for all risk, control and audit issues across all Digital Engineering Solutions and Services teams
• Provide assurance over the department’s controls design and effectiveness, ensuring controls are proportionate and embedded in day‑to‑day department activity
• Provide proactive assurance around risk management through appropriate data driven monitoring and through the implementation of structured sampling techniques to validate that controls are functioning as intended before failure
• Educate and lead the Digital Engineering Staff defining best practice operations and governance in line with industry and company standards
• Work in partnership with the Digital Engineering Solutions and Services Product and Platform owners, challenging and advising on risk management for new products, processes and change programmes. Provide risk-based decision making, supporting the department to make informed, risk-based decisions by providing an aggregated view of risk exposures
• Run the departments Risk/Control/ Audit monthly forum committee presenting high quality risk reports and insights to Head of Digital Engineering Services and Solutions and the Extended Leadership Team
• Responsible for providing visibility of the Extended Leaderships Teams EOL roadmap, the departments position and Product Owners remediation plan and progress
• Drive and adhere to strategic direction of accountable pillars, while supporting the rest of the department
• Responsible for managing Issue Management on behalf Digital Engineering Services and Solutions department
• Handle potential sensitive information relating to Cyber Security events and assessments on behalf of Digital Engineering Services and Solutions
• Work across all areas of the Digital Engineering Services and Solutions department to ensure the Digital Engineering Control & Governance team provides necessary support services, oversight function and governance capabilities to all other extended leadership teams and stakeholders.
• Responsible for building strong relationships across the Bank and Securities functions, underpinned by trust and the core values of the bank. Developing strong relationships with key stakeholders such as IT Risk & Control, Cyber Security, other technology pillars, Operational Risk, Internal Audit, Compliance and external parties where applicable
• A senior role, that plays a pivotal part in strengthening a proactive, inclusive risk culture leading with example of the right leadership, culture and behaviours that are required in the bank.

KEY RESPONSIBILITIESDigital Engineering Solutions and Services Governance

• Oversee Digital Engineering Services and Solutions relationship with IT Risk and 3rd parties for all external audits and assessments.
• Oversee Digital Engineering Services and Solutions relationship with IT Risk for all internal audits which have an Infrastructure or Service Management aspect.
• Ensure strong governance, structures and processes are in place to support effective operational risk and control management across the department
• Accountable for managing Open Issues on behalf of the Digital Engineering Services and Solutions department, tracking and ensuring proactive remediation and timely
• Support Digital Engineering Solutions and Services extended leadership teams with creation/attestation of key controls against the Operational Risk Framework.
• Manage engagement with stakeholders to design, plan and deliver remediation actions for control deficiencies. Oversee risk identification and mitigation efforts, ensuring understanding of strategic goals
• Ensure departments adherence to internal policies and external regulatory requirement
• Manage complex risk related loss events, conducting root cause analysis, working with Product and Platform owners to develop response plans
• Perform applicable operational control checks across Infrastructure and engage with other areas of Technology when required
• Work in partnership with the departments Incident management and Threat and Vulnerability team to detect and address vulnerabilities
• Ensure that the team operates in a controlled manner in accordance with standards and procedures whilst adhering to all related security and compliance procedures
• In conjunction with IT Risk, Security and Control, ensure that all regulatory requirements are fully complied with, including SOX assessments and appropriate defences and controls are in place to deal with all cyber risks
• Execute risk governance across all Digital Engineering Solutions and Services verticals.
• Provide support to Digital Engineering Services and Solutions for pen test findings
• Produce and manage Digital Engineering Solutions and Services owned Key Risk Indicators.
• Support disaster recovery exercises, ensuring new services are documented and deployed with BCP/DR in mind
• Provide advisory assistance to IT Risk and Control relating to My Access Live (MaL) and Access Management processes, acting as input into review processes with particular emphasis on Digital Engineering related platforms
• Input into Incident Management Process where appropriate
• Support new applications as and when released to the business
• Escalate potential service issues to the Management
• Produce regular risk management data for Management. Chair the Departments Risk Oversight Committee
• Drive and adhere to strategic direction of accountable pillars, while supporting the rest of the department.

Culture and Leadership

This listing is longer than we store. Read the rest on MUFG's careers page →