CybersecurityJobs.io
← Back to all jobs
MUFG

Cybersecurity GRC - AVP (Open)

MUFG
Tampa, FL $90k - $153k/yr Full time Posted 1h ago
Data Security Facilities Management GRC Identity and Access Management Incident Management Incident Response Information Security InfoSec Management Project Management Risk Governance Risk Management Security Security Compliance Security Operations Security Standards
Apply Now

Job Description

This role supports MUFG’s cybersecurity governance, risk, and compliance (GRC) efforts by monitoring execution across contributing teams, ensuring cyber risk lifecycle records are complete and traceable, and coordinating framework maturity activities tied to the Cyber Risk Institute (CRI) Profile program.

Key Responsibilities

  • Coordinate cyber risk lifecycle activities across contributing teams, tracking status, handoffs, approvals, and open items through to closure.
  • Review lifecycle outcomes for completeness, consistency, and traceability; follow up with responsible teams to address gaps or delays.
  • Escalate missed milestones, unresolved dependencies, and process issues to management with clear context and recommended next steps.
  • Maintain process documentation, including RACI and procedures.
  • Coordinate with control owners to track completion of CRI Profile maturity assessments against program timelines.
  • Review assessment outcomes and maturity ratings for consistency across the program and flag gaps or open items for management review.
  • Escalate overdue submissions, unresolved maturity gaps, and remediation delays to management.
  • Maintain the maturity tracker and remediation status, and prepare draft reporting and supporting materials for reporting submissions.
  • Compile KRI/KPI data and prepare recurring status and governance reporting for GRC leadership, highlighting trends, risks, and items requiring decision or escalation.
  • Support responses to internal audit, second line, regulatory, and other requests by coordinating with responsible teams, tracking request progress, and organizing responses.
  • Act as a working-level point of contact for business, system, and control owners and contributing cyber teams, clarifying requirements and following up on deliverables.
  • Identify opportunities to streamline manual coordination, tracking, and reporting activities, and support enhancements to GRC tooling.

Required Qualifications

  • 4-7 years of experience in cyber risk, IT risk, GRC, or information security (minimum 4 years).
  • Working knowledge of core cybersecurity domains such as Identity Access Management, Data Security, Configuration Management, Logging, Incident Response, and Secure Software Development Lifecycle, sufficient to interpret control outcomes and risk information.
  • Experience writing process documentation and maintaining traceable, audit-ready records.
  • Familiarity with banking-relevant cyber risk frameworks and regulations, including NIST CSF 2.0, the CRI Profile, NIST SP 800-53, the FFIEC IT Handbook, NYDFS Part 500, and expectations from the Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB), and other frameworks such as Payment Card Industry (PCI).
  • Working knowledge of cloud security concepts across major cloud service providers.
  • Ability to work independently and collaboratively across all levels of management and employees.
  • Ability to manage multiple priorities, prioritize effectively, and deliver high-quality work.
  • Experience with GRC platforms and workflow tools.
  • Excellent analytical, organizational, and conceptual skills.
  • Excellent oral and written communication skills.

Preferred Qualifications

  • Prior audit, assurance, or advisory experience (for example, Big 4 cyber risk advisory, internal audit, or IT audit).
  • Experience supporting regulatory examinations, MRAs, or consent orders within a large financial institution.
  • Experience supporting framework-based maturity assessments such as the CRI Profile or NIST CSF.
  • Certifications such as CRISC, CISA, or CompTIA Security+.
  • Experience with GRC platforms and workflow tools.

Education

Bachelor’s degree in Information Security or a closely related discipline, or equivalent related experience.

Location and Work Style

Tampa, FL (hybrid).

Compensation

Salary range: USD 90,000 - 153,000 per year.

  • New York / New Jersey: $90k-153k
  • Non NY/NJ: $90k-141k

Technologies and Frameworks

  • NIST CSF 2.0
  • CRI Profile
  • NIST SP 800-53
  • FFIEC IT Handbook
  • NYDFS Part 500
  • Office of the Comptroller of the Currency (OCC)
  • Federal Reserve Board (FRB)
  • Payment Card Industry (PCI)
  • Secure Software Development Lifecycle
  • Identity Access Management
  • Data Security
  • Configuration Management
  • Logging
  • Incident Response
  • GRC platforms
  • Workflow tools

Benefits

  • Comprehensive health and wellness benefits
  • Retirement plans
  • Educational assistance and training programs
  • Income replacement for qualified employees with disabilities
  • Paid maternity and parental bonding leave
  • Paid vacation
  • Sick days
  • Holidays

Visa Sponsorship / Support

Visa sponsorship/support is based on business needs. The company does not anticipate providing visa sponsorship/support for this position.

Similar Jobs