AVP -Cyber Security Specialist

• Carry out Security Risk Assessment to identify potential threats and security risks of systems and networks, assess the risk likelihood and impact, and recommend effective controls to mitigate the risks
• Carry out Threat Modeling to identify potential ways and gaps that systems and networks can be exploited by cyber threats based on the threat landscape, such as advanced malware, data exfiltration, vulnerability exploits, network intrusion, denial of service and other techniques, and recommend appropriate countermeasures.
• Review and evaluate the efficacy of security measures prior to Production system go-live to meet the banks Technology Risk, Security and regulatory compliance requirements
• Review and evaluate the efficacy of security measures of key 3rd party vendors and external-hosted systems of the Bank, during onboarding and ongoing service review
• Assist in creating, managing, and rolling out training programs for staff such as Cybersecurity awareness, cyber offence and defense, and Incident Response (IR).
• Assist in developing, monitoring and reporting the cyber risk profile of the Bank and its APAC branches
• Be the subject matter expert to advise on cyber security frameworks, standards and risk assessment matters.
• Engage in security research and conduct knowledge sharing to ensure the Bank is aware and well-prepared in defending against known and emerging security threats.

• Develop and maintain strong stakeholder management with key stakeholders both within MUFG and externally.
• Work in partnership with colleagues in the global cyber security teams in the regional offices of Japan, Europe, America, China and other offices to share knowledge, support regional/global initiatives and best practices on cyber security.
• Work in partnership with colleagues in the Asian Branches to play a regional role to support regional cyber security improvement plans to ensure a consistent level of maturity in technology and processes across the region.

• Support, coach and guide less experienced members of the team.

• Proactive and possess good understanding of IT Risk, compliance and security management frameworks
• Experience or good knowledge in Application development, Infrastructure and Enterprise Technology stackand system architecture and designis highly preferable
• Experienced in performing security risk analysis of various types of systems such as web-based and mobile applications, enterprise applications, APIs and cloud-based systems
• Knowledge of risk assessment tools, technologies, and methods.
• Detailed understanding of threat modeling practices, techniques and principles.
• Strong stakeholder management skills to collaborate with regional offices and branch offices.
• Keep up-to-date with the latest security standards, authentication and cryptography protocols, and regulatory requirements.
• Strong communication and writing skills with ability to influence heads of department, technical managers and other key stakeholders.
• Strong working knowledge of industry trends, security products and technology.

• Bachelors degree in computing or relevant field
• Good to have certifications Certified Information Systems Security Professional (CISSP)

• Desirable to have at least 6+ years of relevant experience in Threat Modeling, Cyber Risk and Application Security Review.

MUFG