Assistant Vice President – IT Audit & Cybersecurity

Job Description

Manager-IT Auditor-APAC | Mitsubishi UFJ Financial Group

The Tone:
This is a full-time role at Mitsubishi UFJ Financial Group, located in Mumbai. MUFG is one of the world’s leading financial groups, with 150,000 colleagues globally striving to make a difference for clients, organizations, and communities. The company builds long-term relationships, serves society, and fosters shared and sustainable growth with a vision to be the world’s most trusted financial group. This role is crucial for evaluating and enhancing the effectiveness of IT infrastructure and cybersecurity controls across the APAC region, directly contributing to MUFG’s commitment to trust and stability in its financial services.

The TL;DR
• Role: Full Time
• Type: Full-time
• Location: In-person, Mumbai, Maharashtra, India

• Team: Internal Audit Office for Asia (AIAO)
• Mission: Plan and conduct IT audits to evaluate the effectiveness of IT infrastructure and cyber security controls across the APAC region.
• Tech Stack: Power BI, Tableau, Python, Alteryx, Qualys, Zabbix, ServiceNow

What You’ll Actually Do
• Auditing: Plan and conduct IT audits to evaluate the effectiveness of IT infrastructure and cyber security controls across the APAC region.
• Analytics: Leverage data analytics techniques to enhance audit planning, testing, issue identification, and continuous auditing activities.
• Reporting: Prepare and submit audit reports, including audit working papers and recommendations supported by sufficient factual evidence.
• Collaboration: Collaborate with regional and global audit teams to share insights, analytics approaches, and best practices in IT risk and cybersecurity auditing.
• Remediation: Validate and track audit issue remediation to ensure control issues are effectively resolved.

The Must-Haves
• Background: Bachelor’s degree with a minimum 10 years of experience in IT audit, technology risk, or a related discipline within financial services or complex IT environments.
• Experience: Minimum 10 years in IT audit, including auditing IT infrastructure, cybersecurity risk and controls, and IT applications with end-to-end business processes; experience applying data analytics to audit activities such as analysis of application logs, access data, and exception reports.
• Skills: Strong working knowledge of IT audit methodologies, internal auditing standards (e.g., IIA), and risk-based audit approaches; strong stakeholder management and communication skills, with the ability to engage effectively with IT and business stakeholders; ability to work independently while collaborating effectively.
• Bonus: Working knowledge or hands-on experience with audit or data analytics tools (e.g., Power BI, Tableau, Python, Alteryx, Qualys, Zabbix, ServiceNow); familiarity with banking business processes (e.g., corporate banking, transaction banking, global markets, relevant regulatory requirements); professional certifications such as CISA, CISSP, CISM, or equivalent.