About the Role
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups.
Position Title: IT Risk – Senior Analyst
Corporate Title: Senior Analyst
Reporting to: Asia Risk Management Office – Regional Vice President and Assistant Vice President
Location: Bengaluru
Position details
a) Monitor and analyze key risk/other indicator, Self Identified Issue, etc. the IT, Cyber risk status based on quantitative data
b) Monitor/Observe 1Line management meeting and conduct Review and Challenge
c) Regulatory guideline analysis and providing the 2 Line opinion/response
d) Review and challenge 1st Line branch IT RCSA and control testing output
e) Global Cyber trend input and awareness insight share
Roles and Responsibilities
Job responsibilities include but not limited to:
•Under supervision and guidance from regional technology risk team, support branch technology risk management by running branch local Global KRI, SII analysis and response, monitor/observe 1LoD management meeting and conduct review and challenge, regulatory guideline analysis and providing the 2LoD opinion/response, branch IT Risk Control Self Assessment, etc. in collaboration with branch local risk team to ensure timely and effective assessment, monitoring, escalation of technology risk.
•Providing "Subject matter Expertise" from the second line in the principles, processes and technical aspects of domains related to Cyber and IT Security in above mentioned field and others.
•Working in close partnership with Regional Asia Risk Management Office and Systems Office for Asia (ASO – First Line), Internal Audit Office for Asia (AIAO), various APAC branches to manage technology risk initiatives in accordance with regulatory requirements, MUFG internal policies, and industry best practices.
Job Requirements
•Strong understanding of IT governance, risk and cyber security concepts with minimum 5 years of relevant experience. Experience in Financial service would be preferred.
•Experience in executing technology and/or security risk assessment and testing methodologies evaluating the adequacy and efficiency of security controls, and identifying issues resulting from internal and/or external compliance reviews.
•Experience in creation and review of work papers to document testing and/or issue closure for technology issue management including management of regulatory matters.
•Experience with automating and/or the ability to conceptualising automated control solutions is highly desired.
