Tech Risk Control Office Metrics, Findings & Exceptions Director

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

This role is a key member of Technology first line risk and controls team aligned to Technology Governance and Oversight function. This individual leads various governance and oversight activities supporting the Enterprise, Operational and Information Risk Management frameworks with other team members to partner with technology teams to drive effective risk and control management.  The main areas of focus for this role are Risk Metrics, Issues/Findings management and Exceptions governance.  The Technology teams are responsible for assessing technology risk and control environment, identifying improvement opportunities, reporting and monitoring key risk metrics and providing governance with respect to all risk and control matters.

In this role you will focus on internal and external compliance requirements, activities, and deliverables to ensure that Technology meets regulatory and audit milestones. Responsibilities include engaging with regulators and/or leaders from other functions, including audit and compliance, and collaborating with colleagues to prepare or review content prior to submission and manage follow-up actions; establishing processes, templates, and stakeholder matrices for activities; creating roadmaps aligned to recurring and ad hoc milestones; ensuring stakeholders execute appropriately and meet milestones on time; tracking, escalating, and/or remediating risks and issues; and developing and executing executive-level reporting.

RESPONSIBILITIES

• Direct risk metrics governance and oversight activities across Entities.  Includes adequacy of scope and coverage, monitoring adherence to Risk Management Frameworks and reporting to risk and control forums and Committees.

• Lead Information Risk Appetite Statement metrics to expand metric scope and coverage over information risks.  Collaborate with senior leaders across lines of defense on approach, align on objectives and deliverables.

• Support management to develop and generate various metrics reports for senior management and Board level Committees that informs on risk appetite, trends and items that warrant remediation (breaches) and/or escalation.

• Ensure appropriate ownership and collaboration of Metrics, Exceptions and Findings processes with FLoD executives and key stakeholders (eg, ORM, IRM, ERM)

• Direct technology findings and exception management governance routines and enhance routines through automation and reporting. 

• Provide transparency on status of open findings and exceptions, drive closure of exceptions and findings and accountability.

• Work with Business Unit Risk Managers (BURMs) teams to challenge potential issues/Findings/Exceptions and participate in issue development once they are recognized and agreed as issues or exceptions/findings as applicable.

• Engage with key stakeholders, management, BURMs, Second Line of Defense (SLoD), and TLoD to ensure risks are understood across all Lines of Defense (LoDs) and risk treatment is properly identified

• Direct the maintenance and development of internal documentation.

• Provide periodic training to key stakeholders.

• Implement data quality and/or quality assurance (QA) routines to ensure quality of data and adherence to Risk Frameworks.

• Timely and accurately respond to Regulatory, Audit and Second Line of Defense exams or review challenge activities.

• Recruit, develop and retain key talent, ensuring that the resources dedicated to risk management are effective in carrying out required functions.

QUALIFICATIONS

• Bachelor’s degree in technology, engineering, risk management, computer science, information systems, or equivalent field.

• Preferred: degree from a competi