Cybersecurity GRC - AVP (Open)

Cybersecurity Jobs; Tampa (FL); Hybrid; USD 90.000 - 153.000; Vollzeit

Benefits dieser Stelle

Health benefits

Retirement plans

Education assistance

Disability income replacement

Parental leave

Paid vacation

Sick days

Holidays

Zusammenfassung

Cybersecurity Jobs in Tampa is seeking a seasoned GRC professional to support MUFG’s cyber risk governance program. You will monitor lifecycle activities, ensure audit-ready records, and coordinate maturity assessments across control owners.

This hybrid role requires strong knowledge of NIST CSF, CRI Profile, and banking regulations, with a focus on producing clear reporting, dashboards, and responses to audits.

Qualifikationen

• 4-7 years of experience in cyber risk, IT risk, GRC, or information security (minimum 4 years).
• Familiarity with banking-relevant cyber risk frameworks and regulations, including NIST CSF 2.0, CRI Profile, NIST SP 800-53, FFIEC IT Handbook, NYDFS Part 500, OCC, FRB, and PCI.
• Experience writing process documentation and maintaining audit-ready records.
• Knowledge of cloud security concepts across major cloud providers.
• Ability to work independently and with cross-functional teams; strong communication skills.
• Experience with GRC platforms and workflow tools.

Aufgaben

• Coordinate cyber risk lifecycle activities across contributing teams, tracking status, handoffs, approvals, and open items through to closure.
• Review lifecycle outcomes for completeness, consistency, and traceability; follow up with responsible teams to address gaps or delays.
• Escalate missed milestones, unresolved dependencies, and process issues to management with clear context and recommended next steps.
• Maintain process documentation, including RACI and procedures.
• Coordinate with control owners to track completion of CRI Profile maturity assessments against program timelines.
• Review assessment outcomes and maturity ratings for consistency and flag gaps for management review.
• Escalate overdue submissions, unresolved maturity gaps, and remediation delays to management.
• Maintain the maturity tracker and remediation status, and prepare draft reporting and supporting materials for submissions.
• Compile KRI/KPI data and prepare recurring status and governance reporting for GRC leadership.
• Support responses to internal audit, second line, regulatory, and other requests by coordinating with responsible teams.

Kenntnisse

Cyber risk

GRC

Documentation

Stakeholder communication

Cloud security

Time management

Analytical thinking

Project coordination

Cross-functional collaboration

Auditing knowledge

Ausbildung

Bachelor’s degree in Information Security

Tools

GRC platforms

Workflow tools

Jobbeschreibung

This role supports MUFG’s cybersecurity governance, risk, and compliance (GRC) efforts by monitoring execution across contributing teams, ensuring cyber risk lifecycle records are complete and traceable, and coordinating framework maturity activities tied to the Cyber Risk Institute (CRI) Profile program.

Key Responsibilities

• Coordinate cyber risk lifecycle activities across contributing teams, tracking status, handoffs, approvals, and open items through to closure.
• Review lifecycle outcomes for completeness, consistency, and traceability; follow up with responsible teams to address gaps or delays.
• Escalate missed milestones, unresolved dependencies, and process issues to management with clear context and recommended next steps.
• Maintain process documentation, including RACI and procedures.
• Coordinate with control owners to track completion of CRI Profile maturity assessments against program timelines.
• Review assessment outcomes and maturity ratings for consistency across the program and flag gaps or open items for management review.
• Escalate overdue submissions, unresolved maturity gaps, and remediation delays to management.
• Maintain the maturity tracker and remediation status, and prepare draft reporting and supporting materials for reporting submissions.
• Compile KRI/KPI data and prepare recurring status and governance reporting for GRC leadership, highlighting trends, risks, and items requiring decision or escalation.
• Support responses to internal audit, second line, regulatory, and other requests by coordinating with responsible teams, tracking request progress, and organizing responses.
• Act as a working-level point of contact for business, system, and control owners and contributing cyber teams, clarifying requirements and following up on deliverables.
• Identify opportunities to streamline manual coordination, tracking, and reporting activities, and support enhancements to GRC tooling.

Required Qualifications

• 4-7 years of experience in cyber risk, IT risk, GRC, or information security (minimum 4 years).
• Working knowledge of core cybersecurity domains such as Identity Access Management, Data Security, Configuration Management, Logging, Incident Response, and Secure Software Development Lifecycle, sufficient to interpret control outcomes and risk information.
• Experience writing process documentation and maintaining traceable, audit-ready records.
• Familiarity with banking-relevant cyber risk frameworks and regulations, including NIST CSF 2.0, the CRI Profile, NIST SP 800-53, the FFIEC IT Handbook, NYDFS Part 500, and expectations from the Office of the Comptroller of the Currency (OCC) and Federal Reserve Board (FRB), and other frameworks such as Payment Card Industry (PCI).
• Working knowledge of cloud security concepts across major cloud service providers.
• Ability to work independently and collaboratively across all levels of management and employees.
• Ability to manage multiple priorities, prioritize effectively, and deliver high-quality work.
• Experience with GRC platforms and workflow tools.
• Excellent analytical, organizational, and conceptual skills.
• Excellent oral and written communication skills.

Preferred Qualifications

• Prior audit, assurance, or advisory experience (for example, Big 4 cyber risk advisory, internal audit, or IT audit).
• Experience supporting regulatory examinations, MRAs, or consent orders within a large financial institution.
• Experience supporting framework-based maturity assessments such as the CRI Profile or NIST CSF.
• Certifications such as CRISC, CISA, or CompTIA Security+.
• Experience with GRC platforms and workflow tools.

Education

Bachelor’s degree in Information Security or a closely related discipline, or equivalent related experience.

Location and Work Style

Tampa, FL (hybrid).

Compensation

Salary range: USD 90,000 - 153,000 per year.

• New York / New Jersey: $90k-153k
• Non NY/NJ: $90k-141k

Technologies and Frameworks

• NIST CSF 2.0
• CRI Profile
• NIST SP 800-53
• FFIEC IT Handbook
• NYDFS Part 500
• Office of the Comptroller of the Currency (OCC)
• Federal Reserve Board (FRB)
• Payment Card Industry (PCI)
• Secure Software Development Lifecycle
• Identity Access Management
• Data Security
• Configuration Management
• Logging
• Incident Response
• GRC platforms
• Workflow tools

Benefits

• Comprehensive health and wellness benefits
• Retirement plans
• Educational assistance and training programs
• Income replacement for qualified employees with disabilities
• Paid maternity and parental bonding leave
• Paid vacation
• Sick days
• Holidays

Visa Sponsorship / Support

Visa sponsorship/support is based on business needs. The company does not anticipate providing visa sponsorship/support for this position.