Data Security Engineer, Vice President

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world's leading financial groups. Across the globe, we're 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world's most trusted financial group, it's part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

Job Summary

The Data Security Engineer will play a crucial role in ensuring the security and governance of our organization's data. This position is responsible for assessing and managing the organization's data security posture by continuously evaluating current security practices and identifying vulnerabilities. Responsibilities include creating and managing data classification and labeling technology, controls, and processes, working closely with various stakeholders to gather requirements, define patterns, and ensure compliance with governance standards. The specialist will also be responsible for reporting and analyzing data security metrics, advising on data security strategies, and overseeing the execution of data labeling initiatives.

Major Responsibilities

Implement and manage DSPM tools to enhance data protection and compliance with regulatory requirements

Collaborate with various stakeholders to ensure the alignment of DSPM initiatives with overall data security strategies

Adapting data classification requirements to security tools

Integrating data classification results with security tools for enrichment and enhanced security

Working with stakeholders such as Data Privacy, IAM, Security Engineering, and Data Security teams to gather data classification detection requirements

Defining patterns for scanning tools and ensuring alignment with governance standards

Reporting and analyzing data security metrics to inform decision-making

Advising on data security strategies and best practices

Overseeing the execution and progress of data classification and labeling initiatives

Ensuring compliance with data security and protection regulations and standards

Liaison with governance, legal, and business divisions to maintain and update classification and labeling requirements

Presenting findings and strategies to stakeholders and writing comprehensive reports

Qualifications

Bachelor's degree in Cybersecurity, Information Technology, Computer Science or Related Fields or relevant industry certifications and comparable experience

7 -10 years' experience in data security and protection

Proven experience in Data Security Posture Management (DSPM), including the assessment, management, and improvement of an organization's data security posture

Experience in implementing DSPM tools and technologies

Experience in identifying and mitigating data security risks through continuous monitoring and evaluation of data security practices

Proven experience in data classification and labeling technology, controls, and processes

Experience with data classification and labeling tools such as BigID, Imperva FAM / DDC (File Activity Monitoring / Data Discovery & Classification), Microsoft Purview, Stealthbits or similar technologies

Experience working with stakeholders such as Data Privacy, IAM, Security Engineering, and Data Security teams

Experience in testing alignment with governance standards and advising on data security strategies

Experience defining and reporting metrics and KPIs / KRIs / KCIs

Experience in the banking or finance industries preferred

Cybersecurity experience in a regulated banking or financial environment

Certifications

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM)

Certified Information Systems Auditor (CISA)

Certified in Governance, Risk and Compliance (CGRC; formerly Certified Authorization Professional [CAP])

Certified Data Management Professional (CDMP)

Certified Information Privacy Professional (CIPP)

Any relevant certifications in data security, protection, and governance

Functional Skills

Strong understanding of DSPM principles, including data discovery and classification, risk assessment, policy management, incident response, and compliance management

Ability to define and implement data classification patterns for scanning tools

Ability to implement adaptive security measures based on data sensitivity and regulatory requirements

Proficiency in using DSPM tools to gain visibility into data assets and user activities, and to enforce least privilege principles

Proficiency in reporting and analyzing data security metrics

Experience in developing and executing data security strategies

Knowledge of data protection and data loss prevention (DLP) technologies

Ability to adapt data classification requirements to security tools

Experience in integrating data classification results with security tools for enrichment and enhanced security

Foundational Skills

Excellent communication and collaboration skills

Strong analytical and problem-solving abilities

Ability to work independently and as part of a team

Strong organizational and project management skills

Ability to manage multiple priorities and meet deadlines

Attention to detail and commitment to quality

Strong presentation and writing skills

The typical base pay range for this role is between $140K - $185K depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and / or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below.

MUFG Benefits Summary ()

We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws (including (i) the San Francisco Fair Chance Ordinance, (ii) the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance, (iii) the Los Angeles County Fair Chance Ordinance, and (iv) the California Fair Chance Act) to the extent that (a) an applicant is not subject to a statutory disqualification pursuant to Section 3(a)(39) of the Securities and Exchange Act of 1934 or Section 8a(2) or 8a(3) of the Commodity Exchange Act, and (b) they do not conflict with the background screening requirements of the Financial Industry Regulatory Authority (FINRA) and the National Futures Association (NFA). The major responsibilities listed above are the material job duties of this role for which the Company reasonably believes that criminal history may have a direct, adverse and negative relationship potentially resulting in the withdrawal of conditional offer of employment, if any.

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.

We are proud to be an Equal Opportunity Employer and committed to leveraging the diverse backgrounds, perspectives and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate on the basis of race, color, national origin, religion, gender expression, gender identity, sex, age, ancestry, marital status, protected veteran and military status, disability, medical condition, sexual orientation, genetic information, or any other status of an individual or that individual's associates or relatives that is protected under applicable federal, state, or local law.

At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them!

Our Culture Principles

Client Centric

People Focused

Listen Up. Speak Up.

Innovate & Simplify

Own & Execute