VP Information Risk

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

This role will serve as a Second Line of Defense (2LoD) Vice President of Information Risk, responsible for overseeing Information Security, Information Technology, and Artificial Intelligence risks across the organization. The primary objective is to support the organization in defining, implementing, and monitoring Information Risk governance practices, ensuring compliance with regulatory requirements, as well as adherence to corporate policies, standards, and procedures.

The position will provide independent review and challenge to the First Line of Defense, oversee remediation activities, and ensure effective management of Information Security, IT, and AI-related risks.

• →Act as a Second Line of Defense oversight function for Information Security, IT Risk, and Artificial Intelligence Risk Management.
• →Define, maintain, and oversee Information Risk Policies, Standards, Procedures, and governance processes.
• →Provide independent review and challenge to ensure compliance with corporate requirements and applicable regulatory obligations in Mexico and the United States.
• →Assess and monitor Information Technology and Information Security risks across the organization.
• →Review and challenge risk assessments, control effectiveness evaluations, risk mitigation plans, and management responses.
• →Track and oversee Information Security and IT-related issues, audit findings, regulatory observations, and remediation activities, ensuring timely resolution.
• →Review and challenge issue remediation plans, target dates, and corrective actions related to technology and cybersecurity risks.
• →Monitor compliance with Information Security, IT Governance, Data Protection, and related regulatory requirements.
• →Support the implementation and continuous improvement of the Information Risk Framework and governance processes.
• →Oversee the implementation and adoption of corporate policies, standards, and procedures related to Artificial Intelligence and associated risks.
• →Prepare management and governance reports regarding Information Risk, Information Security, IT Risk, and Artificial Intelligence activities across the Bank.
• →Follow up, review, challenge, and report on system failure incidents, ensuring proper application of corporate governance standards and timely closure.
• →Analyze risk trends, emerging cyber threats, technology incidents, and operational risk events to identify potential impacts to the organization.
• →Partner with Technology, Operations, Compliance, Legal, Risk Management, Internal Audit, and business teams to strengthen the overall control environment.
• →Support regulatory examinations, internal audits, external audits, and governance committee reporting activities.

• Bachelor’s degree or equivalent professional experience.
• Experience in Information Security, IT Risk Management, Information Technology Governance, IT Audit, Compliance, or Operational Risk.
• Experience working within financial institutions or highly regulated environments.
• Understanding of Information Security, Technology Risk, Cybersecurity, and Operational Risk frameworks.
• Experience performing risk assessments, control reviews, issue management, governance oversight, and regulatory compliance activities.
• Strong understanding of Information Risk Management principles and governance processes.
• Knowledge of technology, cybersecurity, cloud, data governance, and operational resilience concepts.
• Familiarity with industry frameworks and standards such as NIST, COBIT, COSO, ISO 27001, ITIL, or related frameworks.
• Strong analytical, stakeholder management, communication, and challenge skills.
• Advanced English required.

• Experience with Information Security and IT regulatory requirements in Mexico and the United States.
• Experience supporting financial institutions in the implementation of Information Security, Technology Risk, and regulatory requirements.
• Understanding of the Three Lines of Defense Risk Management Framework.
• Experience acting in a Second Line of Defense oversight or governance role.
• Experience supporting regulatory examinations, internal audits, and external audits.
• Background in financial services, banking, consulting, risk management, information security, or Big Four advisory practices.
• Experience preparing risk reports, metrics, dashboards, and presentations for senior management and governance committees.
• Knowledge of Artificial Intelligence governance, risk management, policies, standards, and regulatory expectations.
• Experience overseeing policy implementation, compliance monitoring, and remediation management related to Information Security, IT Risk, and Artificial Intelligence.