About Us: MUFG Bank, Ltd. is Japans premier bank, with a global network spanning in more than 40 markets. Outside of Japan, the bank offers an extensive scope of commercial and investment banking products and services to businesses, governments, and individuals worldwide. MUFG Banks parent, Mitsubishi UFJ Financial Group, Inc. (MUFG) is one of the worlds leading financial groups. Headquartered in Tokyo and with over 360 years of history, the Group has about 120,000 employees and offers services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. The Group aims to be the worlds most trusted financial group through close collaboration among our operating companies and flexibly respond to all the financial needs of our customers, serving society, and fostering shared and sustainable growth for a better world. MUFGs shares trade on the Tokyo, Nagoya, and New York stock exchanges.MUFG Global Service Private Limited: Established in 2020, MUFG Global Service Private Limited (MGS) is 100% subsidiary of MUFG having offices in Bengaluru and Mumbai. MGS India has been set up as a Global Capability Centre / Centre of Excellence to provide support services across various functions such as IT, KYC/ AML, Credit, Operations etc. to MUFG Bank offices globally. MGS India has plans to significantly ramp-up its growth over the next 18-24 months while servicing MUFGs global network across Americas, EMEA and Asia Pacific.Roles and Responsibilities Interpret cybersecurity relevant regulatory and other requirements or best practices and translate these to business aligned cybersecurity requirements. Architect, design and implement cyber technology products. Provide high level guidance for technical solutions across the cyber security platform. Providing recommendations on security best practises for cross portfolio projects Manage and work independently or as part of a team in delivering complex projects. Ensure MUFG operates under comprehensive and relevant Cyber Security policies and standards with appropriate staff awareness, compliance monitoring and reporting. Monitor and proactively manage all Cyber Security toolsets that includes: (Should be proficient in few technologies) Web Access & Monitoring Systems Network Security Monitoring Systems Endpoint Security Monitoring Systems Cloud Security Posture Management Ensure adequate technical safeguards are in place and are being actively managed by the support teams to provide appropriate protection to MUFGs information assets across various environments such as Servers, Databases, Networks, Cloud and related systems: Conduct Cyber Security reviews for existing and new, on-prem, cloud and 3rd party systems, solutions, firewall rules, architecture, network designs to ensure these are consistent with MUFGs risk appetite, policy & standard requirements. Be seen as the Cyber Security centre of excellence for MUFG and ensure MUFG adopts an appropriate and professional response on any Cyber Security issues raised by the organisations business activities. Liaise with IT teams to ensure Cyber Security alerts, threats and vulnerabilities across the IT estate are highlighted, managed and mitigated within appropriate timescales. Liaise with Technology and Business teams as necessary to ensure all MUFG systems meet security standards and/or agree appropriate measures to mitigate the risk where they dont. Support Cyber Security incidents and annual penetration testing activities. Support MUFG Cyber Security risk profile and associated operational risk reporting. Support Audit & Regulatory liaison and ensure consistent and timely answers to information requests. Support any issues and remedial actions resulting from Cyber Security incidents and audits within agreed timelines. Job Requirements: Bachelors degree Computer Sciences, or equivalent prior work experience in a related field 8 - 10 years of working experience in Information Security or other Information Technology fields Minimum of 5 years working directly in Cybersecurity Engg and Operations Management Experience with cloud computing security, network, operating system, database, application, and mobile device security. Experience with information security risk management, including conducting information security audits, reviews, and risk assessments. Knowledge of models/frameworks such as Kill Chain and MITRE ATT&CK Understanding of offensive security to include common attack methods. Detailed knowledge and experience in security and regulatory frameworks (ISO 27001, NIST 800 series, FFIEC, SOC2, etc.) Understanding of enterprise detection technologies and processes (advanced threat detection tools, intrusion detection system/intrusion prevention system (IDS/IPS), network packet analysis, endpoint protection, Anti malware/anti-virus). Experience working within the Financial Services Industry preferred if any
Job Title
Senior Cyber Engineer Manager