Director, Security Operations Center & Threat Intelligence
Requisition # 10030470-WD
Job Type Day
Location Tempe, Arizona
Date Posted 12/17/2019
Your potential. Your opportunity.
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), the 5th largest financial group in the world (as ranked by S&P Global, April 2018) with total assets of over $2.9 trillion (106.2 (JPY) as of March 30, 2018) and 150,000 colleagues in more than 50 countries. In the U.S., we're 13,000 strong, working together to positively impact every customer, organization, and community we serve. We achieve this by delivering on our values, putting people first, fostering long-term relationships built on honesty and mutual understanding, and inspiring the best in each other. This is all part of our inclusive, high-performing culture supported by Total Rewards that include our cash balance pension plan. Join a team that's working to fulfill its vision to be the world's most trusted financial group.
Director, Security Operations Center & Threat Intelligence
Supporting MUFG's corporate vision to "Be the World's Most Trusted Financial Group" and reporting directly to the Head of Global Security Operations Center (GSOC) & Threat Intelligence the successful candidate will lead a team of cyber security professionals to investigate potential security incidents and monitor all intelligence sources to identify potential threats / compromise to develop proactive strategies to minimize impact of cyber security threats across MUFG globally.
This role will primarily focus on the MUFG Union Bank security operations center in the US but is expected to work with global cybersecurity and technology stakeholders to establish strategy, obtain consensus and continuously expand global coverage of existing and new cybersecurity capabilities.
Provide leadership and oversight of a 24 X 7 X 365 security operations team in the US which is responsible for security monitoring, incident response and threat intelligence
Provide day to day leadership and oversight of the teams focused on the Security Operations Center, Incident Response and Threat Intelligence
Execute against an overall global strategy aligned with local, regional and global MUFG cybersecurity objectives developed in conjunction with Head of GSOC & Threat Intelligence and global stakeholders.
Maintain a clear roadmap that ensures progress against strategy and against tactical priorities
Ensure that the appropriate controls are in place for security operations and threat intelligence processes and products and that those controls are documented and tested regularly to evidence they are working as designed
Supply information about the health and status of the teams' performance and security posture of the company by reporting through channels such as regular operational reports, intelligence briefings, quarterly business reviews, executive presentations, and the regular operational and control- based metrics
Network and maintain relationships with known industry experts and leaders
Stay abreast of technology trends and cutting edge ideas to ensure an eye to the future
Leverage and maintain vendor relationships primarily in the US to compliment the delivery of security operations and threat intelligence
Manage Service Level Agreements (SLA) and relationships with all MUFG global entities leveraging the services supplied by your teams
Develop inclusive teams in which people are empowered to succeed and partnership is encouraged
Support a high performance culture, ensure appropriate training for engineering staff, provide regular communications to your team and external partners, represent the firm to outside agencies and partner companies as require
Skills & Abilities:
10 plus years of relevant leadership, technology and industry experience
Proven experience working within a global and highly matrixed environment within a diverse business culture
Proven knowledge in modern technologies and how security monitoring and threat intelligence applies to these technologies
Experience implementing security monitoring solution using industry standard Security Information & Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR).
Experience developing security monitoring capability within a cloud environment
Ability to identify opportunities and continuously drive throughput for the team through automation and analysis of team/individual performance
Works effectively in a team environment; addresses conflicts appropriately, and builds productive partnerships with customers, business partners, and stakeholders in order to achieve targeted business results
Client satisfaction-focused; builds relationships with business partners and ensures prompt, transparent proactive, and effective communications with these partners
Ability to communicate and present complex issues and ideas with precision and clarity, adjusting appropriately for the audience
Ability to effectively manage competing priorities with a keen eye for details, strong organizational skills an
Clear understanding of regulatory, audit and risk expectations as they pertain to cyber security operations and threat intelligence
Ability to gain the respect and trust of highly technical staff to be able to motivate and groom them as well as the confidence of senior leadership in the team's capabilities
The above statements are intended to describe the general nature and level of the work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified.
We are proud to be an Equal Opportunity / Affirmative Action Employer and committed to leveraging the diverse backgrounds, perspectives, and experience of our workforce to create opportunities for our colleagues and our business. We do not discriminate in employment decisions on the basis of any protected category.
A conviction is not an absolute bar to employment. Factors such as the age of the offense, evidence of rehabilitation, seriousness of violation, and job relatedness are considered in all employment decisions. Additionally, it's the bank's policy to only inquire into a candidate's criminal history after an offer has been made. Federal law prohibits banks from employing individuals who have been convicted of, or received a pretrial diversion for, certain offenses.
Primary Location Tempe, Arizona
Schedule Full Time