Information Security Product & Service Delivery Specialist – Global Security Operations – Product & Service Delivery

Job Description

Global Incident Commander, Manager AVP | Mitsubishi UFJ Financial Group

The Tone:
This is a full-time role at Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups with 150,000 colleagues globally. This role is crucial for driving the delivery and execution of cybersecurity services across the Global Security Operations Center (GSOC) Center of Excellence. It ensures consistent, high-quality delivery of core GSOC services, aligning with enterprise risk objectives, governance standards, and evolving global requirements to maintain trust and security.

The TL;DR
• Role: Full Time
• Type: Full-time

• Team: Global Security Operations Center (GSOC) Center of Excellence, part of the Information Security Services Team.
• Mission: Drive consistent and high-quality delivery of cybersecurity services across global regions to meet enterprise risk objectives.
• Tech Stack: SIEM operations, Cyber Kill Chain, MITRE ATT&CK, automation, AI, light scripting.

What You’ll Actually Do
• Service Delivery: Drive end-to-end execution of GSOC service delivery across global regions, ensuring consistency in operations such as log ingestion, use case lifecycle management, threat detection, and incident response.
• Log Source Management: Coordinate the onboarding and integration of new log sources, working with regional teams and technology partners to ensure timely ingestion and coverage alignment with risk priorities.
• Use Case Development: Lead the development, tuning, and governance of GSOC use cases to improve detection accuracy, reduce false positives, and address emerging threat vectors.
• Program Management: Manage cross-functional programs from initiation through delivery, ensuring milestones are met and outcomes are communicated effectively to stakeholders across regions.
• Performance Reporting: Develop and manage key performance indicators (KPIs) and service-level metrics that reflect operational health, risk appetite, and residual risk, enabling transparent reporting to senior leadership and governance bodies.

The Must-Haves
• Background: Bachelor’s degree in information technology, Cybersecurity, Engineering, Business Administration, or a related field; equivalent experience also considered.
• Experience: 8-10 years of experience in cybersecurity operations, security service delivery, program management, or risk management, ideally within financial services, with hands-on familiarity with GSOC functions.
• Skills: Proven strategic planning, program execution, executive-level reporting, creative problem-solving, creating trending/metrics/management reports, developing briefing materials, facilitating cross-functional collaboration, and excellent written/verbal communication.
• Bonus: Experience in Japanese corporate environments or Japanese proficiency; managing global, cross-cultural teams; broad exposure across cybersecurity domains; familiarity with automation, AI, or light scripting; relevant certifications (e.g., CISSP, CISM, Security+, ISSMP, SANS, GSEC, GCFA, GNFA, GIAC, GCIH); knowledge in security governance, risk management, network security, threat/vulnerability management, incident response, and forensics; experience with cloud computing security, network, operating system, database, application, and mobile device security; experience with information security risk management.