Risk Metrics Governance Manager – Vice President

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 5th largest financial group in the world (as ranked by S&P Global, April 2018). In the Americas, we’re 13,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, developing positive relationships built on integrity and respect. It’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. We’re a team that accepts responsibility for the future by asking the tough questions and owning the solutions. Join MUFG and be empowered to make your voice heard and your actions count.

Job Summary:

As part of an effective risk and control framework, Operations and Technology for the Americas (OTA) has developed an IT Risk Control Manager position for each of its technology risk governance processes. Collectively the IT Risk Control Managers maintain a strong and consistent risk management standard across the technology environment. With IT Risk Control Managers appointed for each technology risk governance process, OTA has developed a comprehensive coverage and joint accountability model that promotes early identification and assessment of operational and technology risk, effective design and evaluation of controls, and sustainable solutions to mitigate operational and technology risk. The IT Risk Control Manager is responsible for implementing and monitoring adherence to all defined risk and technology management processes to manage information risk under the leadership of the Business Unit Risk Control Officer (BURCO) First Line Risk Executive.

Major Responsibilities:

• Identify information risk appetite, including the relevant metrics and thresholds and define key risk indicators and key performance indicators for information risk

• Monitor and measure information risk metrics, KRIs, KPIs, and thresholds and communicate information risks, including escalation of tolerance breaches, and threats to senior management, appropriate committees, and the Second Line of Defense

• Monitor and perform ongoing management of risks, policy non-compliance and control gaps and escalate issues to the Ops and Tech Risk and Control Office

• Liaise with other IT Risk Control Managers across all technology risk governance processes

• Develop and produce metrics reporting for OTA senior management

• Partner with control colleagues across OTA and engage with other lines of defense as needed including Compliance, Risk, Legal, and Audit

• Participate in cross business and function governance to effectively manage risk

• Proactively seek and report on opportunities to strengthen processes via automation

• Work collaboratively with IT Risk Control team to execute against technology risk governance procedures

• Maintain compliance with applicable second line policies

• Prepare and present materials for ongoing team meetings and meetings with OTA senior management

Qualifications:

• Bachelor’s degree is typically required.

• 5-9 years of experience in a technology risk management role

• Understanding of the regulatory environment and regulations related to technology risk, OCC, and FRB expectations

• Preferred: Big Four IT audit / consulting experience

• Strong leadership and people management skills

• Ability to support and manage work streams with sometimes limited oversight / information from inception to completion

• Ability to manage multiple priorities concurrently, prioritize and efficiently complete responsibilities while maintaining the highest quality

• Experience with problem solving in a team environment by thinking outside of the box, providing innovative solutions with and without technology

• Ability to work collaboratively as part of a team

• Able to identify obstacles and work in conjunction with others to identify options / solutions

• Ability to constructively work both independently and in collaborative environments involving all levels of management and employees

• Strong written and verbal communication skills to articulate findings clearly and effectively

• Experience with managing resources effectively to execute required functions

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.