VP, IT Security Risk & Controls Leader

CFA Institute; Greater London; Hybrid; GBP 120,000 - 150,000; Full time

Job summary

MUFG is seeking a senior IT Risk & Control leader to define and govern the IT Security Risk and Control strategy for the EMEA region. You will oversee risk appetite, KPI definitions, and remediation planning across complex security services and platforms.

You will partner with product owners, platform teams, and senior leadership to ensure effective controls and timely risk reporting, while driving a proactive risk culture across the department.

Qualifications

• Extensive experience leading risk & control functions in a financial services organisation.
• Experience with risk management tools such as OpenPages.
• Knowledge of COBIT and NIST 2 framework.
• Extensive experience leading internal and external audits.
• Proven track record managing risk-related issues end-to-end.
• Experience with AML, data privacy, cybersecurity and FCA regulations.
• SOX knowledge and external assessments experience.
• Extensive infrastructure exposure.
• Threat and vulnerability management experience.
• Incident and problem management experience.
• Ability to communicate governance to senior management.
• Proven leadership of risk & control teams.

Responsibilities

• Lead risk & control governance across IT Security Solutions and Services.
• Oversee audits and risk reporting to senior leadership.
• Engage stakeholders to design remediation actions for control deficiencies.
• Build relationships across the bank and with regulators and suppliers.
• Promote a culture of risk awareness and strong governance.

Skills

Risk & controls leadership

OpenPages

COBIT & NIST 2 framework

Internal & external audit leadership

Risk lifecycle management

Regulatory compliance (AML, FCA, data)

SOX knowledge

Infrastructure risk understanding

Threat & vulnerability management

Incident & problem management

Executive governance communication

People leadership

Education

ITIL Expert

CRISC

CISA / CISM

Degree or equivalent

FRM

PRM

CFA

MBA

Prince 2 Foundation

Job description

MUFG is seeking a senior IT Risk & Control leader to define and govern the IT Security Risk and Control strategy for the EMEA region. You will oversee risk appetite, KPI definitions, and remediation planning across complex security services and platforms.

You will partner with product owners, platform teams, and senior leadership to ensure effective controls and timely risk reporting, while driving a proactive risk culture across the department.