- Posted 15 days ago
- Be one of the first applicants
About this job
Technologies
Job description
Tech Risk and Control Manager, Vice President
- Requisition # 10049144-WD
- Job Type Full time
- Location Charlotte, North Carolina
- Date posted 02/03/2022
Your potential. Your opportunity.
Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 5th largest financial group in the world. Across the globe, we’re 180,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
This is a hybrid position. There are flexible work from home options available. A member of our recruitment team will discuss the options with you in more detail.Some MUFG roles require that individuals be fully vaccinated against COVID-19, subject to medical and/or religious exemptions, if applicable. Should you be selected for an interview, your recruiter will provide additional information.
Job Summary:
In this role you will focus on internal and external compliance requirements, activities, and deliverables to ensure that Operations & Technology meets regulatory and audit milestones. Responsibilities include collaborating with Operations & Technology colleagues to prepare or review content prior to submission and manage follow-up actions; tracking, escalating, and/or remediating risks and issues; and contributing to executive-level reporting.
This role is a key member of a first line risk and controls team dedicated to the Operations & Technology transformation program. You will work with other team members to partner with the transformation team to design, implement, and assess key risk and control elements included in the transformation technology projects. The team is responsible for advising and assessing the technology risk and control environment incorporated into technology projects, identifying improvement opportunities, reporting and monitoring key risk metrics, and providing governance with respect to all risk and control matters.
Major Responsibilities:
-
Design and assist in implementation of key controls, industry standards, policies, and/or procedures within the transformation technology environment
-
Assist in assessment of risk and control alignment with specific technology control frameworks and the internal risk, threat, and control library
-
Partner with transformation to continuously improve the overall risk posture of delivered features, functions, and capabilities
-
Participate in the development, design, and implementation of control testing and risk monitoring programs
-
Collaborate with business partners to facilitate remediation of identified risk and control issues
-
Engage with multiple stakeholders and collaborate with key business partners, risk management, and internal audit
-
Support implementation of information technology and information security control framework
-
Evaluate and benchmark technology process execution against outstanding standards (COBIT, NIST 800-53, FFIEC, etc.)
-
Support the execution of front line controls self-assurance and risk assessment activities (ad hoc controls review, business process management (BPM), risk control self-assessment (RCSA)), and independent risk and audit activities as needed
-
Contribute to controls design and efficiency to technology partners in alignment with all applicable laws, regulations, and internal policies and procedures
-
Implement remediation plans that adhere to issues management mandates; timely issue and corrective action submission, accurate root cause identification, corrective action monitoring, on time closure, no failed validations, and no repeat issue
-
Monitor and document emerging risk, internal operational trends, and external risk events for potential impact to control environment
-
Contribute to risk analysis and risk mitigation recommendations
-
Support technology risk governance by ensuring our control environment performance is reported in a timely manner
-
Support the preparation of risk and controls governance materials as needed
-
Typically requires a BA or BS degree in computer science or related field, or in business or finance with coursework or working experience in areas of risk and/or data analytics
Qualifications:
-
5-6 years' experience in a risk & control or audit function, and compliance.
-
5+ years of experience preferably in a financial institution or other highly regulated environment in technology infrastructure, technology risk management role or equivalent, or related field
-
Demonstrable experience with and knowledge of regulations applicable to the banking and finance industry required
-
Experience with critical data elements (CDE's) and data lineage
-
Understanding of data quality, data quality monitoring, and data maturity models
-
Knowledge and implementation experience with industry best practices and frameworks such as: Committee of Sponsoring Organizations of the Treadway Commission (COSO), COBIT, National Institute of Standards and Technology (NIST)-800-53, Cybersecurity Horizontal Reviews, and ITIL in complex environment
-
Knowledge of critical domestic and international banking regulations (Reg W, Basel II, Federal Financial Institutions Examination Council (FFIEC), General Data Protection Regulation (GDPR), etc.)
-
Experience with executing technology and/or information security risk assessment/testing methodologies evaluating the adequacy and efficiency of internal controls; and identifying issues resulting from internal and or external compliance examinations
-
Experience with risk metrics definition and reporting/scorecard development utilizing key risk metrics tools (IBM Open Pages, Tableau, structured query language (SQL), Access etc.)
-
Strong and diverse modern technology background and experience across diverse domains, illustrating the candidates ability to drive transformation outcomes with specific focus on how to €˜enable' them in a highly regulated enterprise industry context including:- Working knowledge of CSP such as AWS and the cloud-based products, services, and capabilities
-
Conceptual / working understanding with continuous integration and continuous deployment (CI/CD) concepts, tools, and technologies including code repositories (e.g. Git), Jenkins, and Maven
-
Conceptual / working understanding of infrastructure orchestration, service registry/discovery, and configuration management tools, (e.g. CloudFormation, Terraform, Ansible/Puppet)
-
Conceptual / working understanding of software containerization platforms/container orchestration tools such as Docker, Kubernetes, AWS Elastic Kubernetes Service (EKS), and Red Hat OpenShift
-
Conceptual / working understanding of modern master data management, big data platforms, data streaming, analytics and reporting solutions (e.g. AWS Elastic Map Reduce (EMR))
-
Experience with information security risks, regulations or regulatory bodies and security program frameworks, including COSO, COBIT, FFIEC, NIST, AWS well-architected, and ITIL
-
Understanding of information security best practices and implementation of security principles across global organizations, to meet business goals and legal/regulatory requirements
-
Knowledge of current and emerging cloud security trends, as a Service security and architecture concepts, including network segmentation, perimeter security, event monitoring; remediation methods to bring cloud infrastructures into compliance for security compliance
-
Understanding of risk management, including experience executing risk assessments, testing, and evaluating processes and controls
-
Excellent communication, presentation, and influencing skills and ability to manage stakeholders across multiple disciplines
-
Excellent analytical, organizational, and conceptual skills
-
Strong work ethic, ability to make decisions and work under tight deadlines; achievement-oriented and takes initiative
-
Preferred: professional certifications such as Certified Information System Auditor (CISA), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Manager (CISM), Certified in the Governance of Enterprise Information Technology (CGEIT), CSX, Certified Information Systems Security Professional (CISSP), Information Technology Infrastructure Library (ITIL), Control Objectives for Information and Related Technology (COBIT), etc.
-
- Cloud Service Provider (CSP) certifications desired (i.e. Amazon Web Services (AWS) Cloud Practitioner, AWS Specialty Security), relevant professional certifications a plus
We are proud to be an Equal Opportunity/Affirmative Action Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.
Some MUFG roles require that individuals be fully vaccinated against COVID-19, subject to exemptions for medical or religious reasons, as well as any other reason required by applicable law or order. Should you be selected for an interview, your recruiter will provide additional information.About the company
MUFG stands for Mitsubishi UFJ Financial Group, the world’s 5th largest financial group. But if you take a closer look, you’ll see that we stand for so much more.
We are undertaking a significant transformation initiative that will make us an agile company that is powered by a resilient, flexible technology and data stack. This means investing in talent, technologies, and tools that put our clients’ and colleagues’ changing needs first.
Help Build a Bank You'll Be Excited to Call Yours
We are looking for resilient technologists who will help us build the future of banking with a new digitally-led, cloud-first, real-time deposit system. This is a rare opportunity to transition to a modern platform as a member of this high-impact team.
Backed by the strength and stability of the world's 5th largest financial institution, you'll help build a bank you'll be excited to call yours.
Benefits
- Medical, dental, and vision plans
- 401(k) savings plan with company match
- Cash Balance Pension Plan (after vesting)
- Health and Dependent Care Flexible Spending Accounts
- Maternity/paternity leave
- Company-provided basic life insurance
- Employee discount mortgage program (in participating states)
- Tuition Reimbursement
- Adoption assistance program
- Paid time off (including vacation, sick leave, and time to volunteer)