Cybersecurity Operations Execution Specialist

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

The Cybersecurity Operations Execution Specialist supports the Security Operations Center (SOC) and Regional Execution Office (REO) by designing, standardizing, and supporting the implementation of security monitoring controls for applications across the enterprise. This role partners closely with application owners, technology teams, business stakeholders, and SOC teams to understand application architectures and risk profiles, define appropriate monitoring requirements, and ensure controls are implemented effectively. The role also helps centralize security monitoring practices across regions and business lines, advances global standards and reusable patterns, and improves the maturity and transparency of the organization's cybersecurity monitoring posture.

Key Responsibilities:

Security Monitoring Control Design & Execution

• Support the design and implementation of security monitoring controls for applications and technology environments, aligned with the organization's cybersecurity strategy and risk management framework.
• Translate relevant risks, threat scenarios, and application characteristics into clear monitoring requirements and detection use cases.
• Help ensure monitoring controls are practical, supportable, and aligned with SOC operating processes.

Stakeholder Partnership & Risk Profiling

• Partner with application owners, technology teams, business stakeholders, and cybersecurity teams to understand application architectures, data flows, logging capabilities, and risk profiles.
• Determine appropriate security monitoring requirements based on the application's risk, technology, and operating context.
• Guide stakeholders throughout the monitoring onboarding lifecycle to ensure controls are implemented effectively.

Control Implementation, Testing & Operationalization

• Coordinate with SOC, engineering, and application teams to implement defined monitoring controls and supporting log sources.
• Ensure completed controls are documented, transitioned into operations, and supported by appropriate procedures and ownership.

Centralization & Standardization

• Help centralize and standardize security monitoring controls across regions, entities, and business lines.
• Contribute to global standards, reusable monitoring patterns, onboarding procedures, and governance documentation.
• Identify opportunities to reduce duplication and improve consistency across SOC monitoring services.

Operations Maturity, Metrics & Reporting

• Support initiatives that improve the maturity, efficiency, and transparency of security monitoring operations.
• Identify and maintain meaningful metrics and data sources that help stakeholders understand onboarding progress, control coverage, risk posture, and operational effectiveness.
• Prepare status updates and reporting for governance forums, leadership, risk partners, and other stakeholders.
• Develop automations to increase team efficiency and sustainability.

Gap Identification & Remediation

• Collaborate with cybersecurity, risk, control, audit, and technology teams to identify gaps in monitoring coverage or control implementation.
• Document gaps, coordinate remediation plans, track actions to completion, and escalate barriers when needed.
• Support evidence collection and clear documentation for risk, control, and audit activities.

Service Enablement & Entity Engagement

• Build and maintain relationships with regional entities and teams that receive SOC monitoring services.
• Gather stakeholder feedback, translate needs into actionable plans, and coordinate those plans through completion.
• Promote clear expectations, shared accountability, and effective communication between service providers and service recipients.

Qualifications:

• At least 2 years of experience in cybersecurity risk management, cybersecurity operations, security monitoring, incident response, security engineering, technology risk, or a related discipline.
• Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent professional experience.
• Experience evaluating applications or technologies to determine applicable cybersecurity controls.
• Relevant cybersecurity certification preferred, such as CISSP, CISM, GIAC, or equivalent.
• Working knowledge of SOC processes, including log onboarding, detection use cases, alert triage, escalation, and operational handoff.
• Familiarity with SIEM and security monitoring technologies, as well as common cloud, infrastructure, application, and identity log sources.
• Understanding of cybersecurity and risk frameworks, such as NIST CSF, CRI, MITRE ATT&CK/D3FEND, and the ability to apply them to monitoring requirements and control design.
• Experience coordinating work across application, technology, cybersecurity, risk, control, audit, and business stakeholders.
• Ability to document requirements, procedures, decisions, risks, action plans, metrics, and implementation evidence clearly and consistently.
• Strong analytical, problem-solving, project coordination, communication, and stakeholder engagement skills.
• Ability to manage multiple priorities, follow work through to completion, and operate effectively in a regional and global environment.

Education

• Bachelor's degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience
• Visa sponsorship/support is based on business needs. We do not anticipate providing visa sponsorship/support for this position.
• The typical base pay range for this role is as follows:

• New York / New Jersey: $102k-153k
• Non–New York / New Jersey: $102k-141k

• depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.
• Our hybrid work schedule is four days on-site and work remotely one day per week.
• MUFG Benefits Summary

We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual’s associates or relatives that is protected under applicable federal, state, or local law.