Cybersecurity GRC – AVP

MUFG

. Support governance of the cyber risk lifecycle by monitoring execution across contributing teams .

Posted 10/15/2026full-timeUnited StatesLead💰 $90,000 - $153,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Risk Management, Governance, Risk, and Compliance (GRC), and Information Security, with a strong focus on process documentation, maturity assessments, and regulatory compliance. Proficient in coordinating cross-functional teams and enhancing GRC tooling for improved tracking and reporting.

Highest-signal resume keywords

Cyber Risk ManagementGovernance, Risk, And Compliance (GRC)NIST CSF 2.0Identity Access ManagementProcess Documentation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber RiskIT RiskData SecurityConfiguration ManagementIncident ResponseSecure Software Development LifecycleCloud Security ConceptsMaturity AssessmentsKRI/KPI Data CompilationRegulatory Compliance

Soft Skills

Analytical SkillsOrganizational SkillsCommunication SkillsCollaborationTime Management

Tools & Technologies

GRC PlatformsWorkflow Tools

Certifications & Qualifications

CRISCCISACompTIA Security+

Industry Keywords

NIST SP 800-53FFIEC IT HandbookNYDFS Part 500OCC ExpectationsFRB ExpectationsPCI Frameworks

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Support governance of the cyber risk lifecycle by monitoring execution across contributing teams
Track status, gaps, handoffs, approvals, and open items through closure
Review lifecycle outcomes for completeness, consistency, and traceability
Escalate missed milestones, unresolved dependencies, process issues, overdue submissions, maturity gaps, and remediation delays to management
Maintain process documentation, RACI, procedures, maturity tracker, and remediation status
Coordinate CRI Profile maturity assessments with control owners
Review assessment outcomes and maturity ratings for consistency
Prepare draft maturity reporting and supporting materials
Compile KRI/KPI data and prepare recurring status and governance reporting for GRC leadership
Support internal audit, second line, regulatory, and other requests by coordinating responses and tracking completion
Serve as a working-level point of contact for business, system, control owners, and contributing cyber teams
Identify opportunities to streamline coordination, tracking, and reporting and support GRC tooling enhancements

Requirements

What you’ll need

4–7 years' experience in cyber risk, IT risk, GRC, or information security
Working knowledge of Identity Access Management, Data Security, Configuration Management, Logging, Incident Response, and Secure Software Development Lifecycle
Working knowledge of cloud security concepts across major cloud service providers
Experience writing process documentation and maintaining traceable, audit-ready records
Familiarity with NIST CSF 2.0, the CRI Profile, NIST SP 800-53, the FFIEC IT Handbook, NYDFS Part 500, OCC and FRB expectations, or PCI frameworks
Experience supporting regulatory examinations, MRAs, or consent orders within a large financial institution preferred
Experience supporting framework-based maturity assessments such as the CRI Profile or NIST CSF preferred
One or more of CRISC, CISA, or CompTIA Security+ preferred
Ability to work independently and collaboratively with all levels of management and employees
Ability to manage multiple priorities concurrently and efficiently complete responsibilities while maintaining high quality
Experience with GRC platforms and workflow tools preferred
Excellent analytical, organizational, and conceptual skills
Excellent oral and written communication skills
Bachelor's degree in Information Security or a closely related discipline, or equivalent related experience
Visa sponsorship/support is based on business needs; sponsorship is not anticipated for this position

Benefits

Comp & perks

Discretionary performance-based bonus and/or incentive compensation
Comprehensive health and wellness benefits
Retirement plans
Educational assistance and training programs
Income replacement for qualified employees with disabilities
Paid maternity and parental bonding leave
Paid vacation
Sick days
Holidays