Vice President, Risk and Control – Digital Engineering

Overview

In this role you will define and govern the Digital Engineering Risk and Control strategy within MUFG’s technology risk framework, ensuring effective risk management across Digital Engineering Solutions and Services. You will lead governance, audits, and issue remediation, collaborating with IT Risk, Cyber Security, and product owners to secure processes and change programs. The role offers influence across multiple regions in a regulated environment and opportunities to shape risk culture and governance maturity. You will drive risk-based decision making and provide data-driven insight to senior leadership.

Responsibilities

• Govern Digital Engineering Services and Solutions risk and control governance across external and internal audits
• Manage open issues and drive proactive remediation for the department
• Provide assurance on control design and effectiveness; ensure controls are embedded in day-to-day activities
• Produce and maintain Key Risk Indicators and risk reports; chair Risk Oversight Committee
• Collaborate with IT Risk, Security, and Product/Platform owners on risk for new products and changes
• Lead risk governance across all Digital Engineering Solutions and Services verticals
• Oversee incident management, vulnerability management, and disaster recovery planning
• Educate and lead the department on best-practice governance aligned with industry standards
• Build strong stakeholder relationships; influence risk decisions at executive level
• Support regulatory compliance obligations including SOX and cyber risk defenses
• Ensure alignment with policy, regulatory requirements, and BCP/DR considerations
• Support pen test findings remediation and attestation against Operational Risk Framework
• Drive strategic direction for risk pillars and issue management across the department
• Chairs the Departments Risk Oversight Committee and reports to extended leadership

Key requirements

• Extensive risk and control leadership experience in a financial services or regulated environment
• Experience presenting risk to executives; credible with senior management
• Proven track record in disaster recovery, vendor management, and complex risk issues
• Experience with infrastructure and service management risks; regulatory compliance knowledge
• Strong familiarity with risk tools (e.g., OpenPages) and risk frameworks (COBIT, NIST)
• Experience with internal and external audits and risk reporting
• Ability to manage teams and lead across regions
• Experience with AML, data privacy, cybersecurity, and FCA regulatory considerations
• ITIL Expert, CRISC, CISA/CISM qualifications; degree educated

• Strong leadership and people management
• Excellent communication and stakeholder management
• Decision-making under pressure; strategic yet practical
• OpenPages risk management tool
• COBIT; NIST framework
• Regulatory compliance (SOX, FCA; AML, data privacy)

…