Phishing Simulation, Security Awareness and Security Services Catalog Coordinator

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Summary

The Phishing Simulation, Security Awareness and Security Services Catalog Coordinator will leverage technology to manage and deploy monthly global phishing simulated exercises for Enterprise Information Security (EIS) team. The resource will also integrate cyber security educational materials into the banks Learning Platform for mandatory staff trainings. Works closely with the Global Security Operation Center (GSOC) to improve validation procedures associated by reported Phishing from staff. The resource will function as a program manager supporting the EIS Services Catalog to coordinate activities across service owner functions. The ideal candidate will interact across EIS and global affiliates with a focus on ensuring services are functioning as required.

Major Responsibilities

• Manage and deploy monthly global phishing simulated exercises for Enterprise Information Security (EIS) team.
• Manage the integration of cyber security educational materials into the banks Learning Platform for mandatory staff trainings.
• Function as a program manager supporting the EIS Security Services Catalog. The Services Catalog standardizes people, process and technology across the organization.
• Will interact across EIS and global affiliates with a focus on ensuring services are functioning as required.
• Deliver quarterly global and monthly targeted phishing simulated exercises and complete required security awareness training for staff.
• Develop analytics metrics reporting on success/opportunities from phishing exercises and how to strengthen training process.
• Partner within EIS to influence business units by demonstrating how security efforts align to their strategic objectives and contribute to the success of the EIS organization.
• Provide clear and consistent communications to service owners and affiliate stakeholder regarding current state of services.
• Identify and evaluate gaps in service delivery and suggest remediation plans to enable service owners and maintain affiliate stakeholder confidence in EIS service delivery.
• Collaborating with multiple service owners and affiliate stakeholders and attending regular meetings.
• Gathering and reporting operating metrics associated with services, evaluating SLAs achieved across the service categories and provide regular reporting from service owners to address any issues or changes to the service offerings.

Qualification

• Bachelor's degree in information systems, cybersecurity, or a related field or combination of education and relevant experience.
• 3-5 years’ of experience supporting a security awareness program including phishing simulations.
• 2+ years' Financial Services / Banking experience working in information technology with a focus in information security a plus
• Prior experience working across other industries (non financial) in a large multinational corporation or global company a plus.
• Able to manage multiple activities simultaneously.
• Able to drive deliver of Enterprise Information Security (EIS) services and influence as required to improve delivery and functionality of services.
• Certification pertaining to information security and data privacy protection a plus (e.g., Security + (Plus), CISSP.
• Prior project or program management experience, ability to manage multiple activities simultaneously and influence indirect resources to achieve required outcomes.
• General understanding of security controls and how to apply them to business use cases.
• Understanding of relevant key performance indicators and key risk indicators and the ability to set, apply, and report them on a regular basis.
• Prior experience implemented and operating a security awareness program incl