Infrastructure Security Manager - Software Security Cryptography

Company: MUFG
Location: Tempe
Posted on: September 4, 2020

Job Description:

Job Description: span class="blockpanel"span class=""/span/spanspan id="requisitionDescriptionInterface.ID1647.row1" class="text" title=""p style="margin-top: 0px; margin-bottom: 0px;"p style="margin-top: 0px; margin-bottom: 0px;"bifont color="black" size="3" style="background-color: white;"Do you want your voice heard and your actions to count?/font/i/b/pp style="margin-top: 0px; margin-bottom: 0px;"font face="Arial" size="3"bibr/i/b/font/pp style="margin-top: 0px; margin-bottom: 0px;"font size="3"Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 5th largest financial group in the world (as ranked by SP Global, April 2018). In the Americas, we're 14,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, developing positive relationships built on integrity and respect. It's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. We're a team that accepts responsibility for the future by asking the tough questions and owning the solutions. Join MUFG and be empowered to make your voice heard and your actions count. /font/ph2ifont size="3"Job Summary:bifont size="3"/font/i/b/font/i/h2p style="margin-top: 0px; margin-bottom: 0px;"font face="Arial" size="3"The Infrastructure Security Vice President (VP) will work within the Software Security Cryptography Group within Enterprise Information Security (EIS). The role reports to the Director of Software Security and Cryptography./font/pdiv/divp style="margin-top: 0px; margin-bottom: 0px;"font face="Arial" size="3"The role is managerial and technical. Candidates must possess a solid understanding of infrastructure security and preferably have held positions in cybersecurity and systems administration. The role also requires an understanding of business and governance processes. They must understand applications, operating systems, networking, cloud infrastructure and basic attacker tactics, techniques and procedures (TTPs). /font/pdiv/divp style="margin-top: 0px; margin-bottom: 0px;"font face="Arial" size="3"Given that vulnerability management and risk exposure extend across all technical systems enterprise-wide, responsibilities of this position include continuously identifying vulnerabilities or non-compliance, reporting, and remediation. /font/pdivfont size="2"/font/divdivbifont size="3"Major Responsibilities:/font/i/b/divdivbifont size="3"/font/i/b/divdivbfont face="Arial"Enablement/font/b/divullip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Partner and maintain regular open lines of communications with Technology, Infrastructure and Operation to understand their plans and how Software/Infrastructure Security can securely enable them to execute their vision and business obligations/font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Document, prioritize and formally report asset and vulnerability state, along with remediation recommendations/font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Communicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging/font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Provide support to explain risk and provide or facilitate remediation or mitigation consultation so the end user knows how to make a more secure system, achieve compliance and better still - not make the same mistake the second timebfont size="3"/font/b/font/p/li/uldivbfont size="3"Governance/font/b/divullip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Provide thought leadership and subject matter expertise in Infrastructure Security /font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Manage and retain teams that perform infrastructure technical security assessments/font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Leverage vulnerability database sources to understand each weakness, its probability and remediation options, including vendor-supplied fixes and workarounds/font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Define key performance indicators (KPIs) and metrics that illustrate effective and efficient vulnerability management/font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Maintain process to feed vulnerability data feeds from controls into metrics, GRC or defect management processes/font/p/lilip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Assist in responding to board-level, senior-management, regulatory, audit compliance activities/font/p/li/uldivbfont size="3"Secure Systems Operations/font/b/divullip style="margin-top: 0px; margin-bottom: 0px;"font size="3"Own the management and execution of infrastructure vulnerability strategy, process and solutions such as Qualys VM/font/p/lilip style="

Keywords: MUFG, Tempe , Infrastructure Security Manager - Software Security Cryptography, Executive , Tempe, Arizona