Cybersecurity Operations Execution Specialist

About this role

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details.

The Cybersecurity Operations Execution Specialist supports the Security Operations Center (SOC) and Regional Execution Office (REO) by designing, standardizing, and supporting the implementation of security monitoring controls for applications across the enterprise. This role partners closely with application owners, technology teams, business stakeholders, and SOC teams to understand application architectures and risk profiles, define appropriate monitoring requirements, and ensure controls are implemented effectively. The role also helps centralize security monitoring practices across regions and business lines, advances global standards and reusable patterns, and improves the maturity and transparency of the organization's cybersecurity monitoring posture. Key Responsibilities: Security Monitoring Control Design & Execution • Support the design and implementation of security monitoring controls for applications and technology environments, aligned with the organization's cybersecurity strategy and risk management framework. • Translate relevant risks, threat scenarios, and application characteristics into clear monitoring requirements and detection use cases. • Help ensure monitoring controls are practical, supportable, and aligned with SOC operating processes.

Stakeholder Partnership & Risk Profiling • Partner with application owners, technology teams, business stakeholders, and cybersecurity teams to understand application architectures, data flows, logging capabilities, and risk profiles. • Determine appropriate security monitoring requirements based on the application's risk, technology, and operating context. • Guide stakeholders throughout the monitoring onboarding lifecycle to ensure controls are implemented effectively.

Control Implementation, Testing & Operationalization • Coordinate with SOC, engineering, and application teams to implement defined monitoring controls and supporting log sources. • Ensure completed controls are documented, transitioned into operations, and supported by appropriate procedures and ownership.

Centralization & Standardization • Help centralize and standardize security monitoring controls across regions, entities, and business lines. • Contribute to global standards, reusable monitoring patterns, onboarding procedures, and governance documentation. • Identify opportunities to reduce duplication and improve consistency across SOC monitoring services.

Operations Maturity, Metrics & Reporting • Support initiatives that improve the maturity, efficiency, and transparency of security monitoring operations. • Identify and maintain meaningful metrics and data sources that help stakeholders understand onboarding progress, control coverage, risk posture, and operational effectiveness. • Prepare status updates and reporting for governance forums, leadership, risk partners, and other stakeholders. • Develop automations to increase team efficiency and sustainability.

Gap Identification & Remediation • Collaborate with cybersecurity, risk, control, audit, and technology teams to identify gaps in monitoring coverage or control implementation. • Document gaps, coordinate remediation plans, track actions to completion, and escalate barriers when needed. • Support evidence collection and clear documentation for risk, control, and audit activities.

Service Enablement & Entity Engagement • Build and maintain relationships with regional entities and teams that receive SOC monitoring services. • Gather stakeholder feedback, translate needs into actionable plans, and coordinate those plans through completion. • Promote clear expectations, shared accountability, and effective communication between service providers and service recipients.

Qualifications: • At least 2 years of experience in cybersecurity risk management, cybersecurity operations, security monitoring, incident response, security engineering, technology risk, or a related discipline. • Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent professional experience. • Experience evaluating applications or technologies to determine applicable cybersecurity controls. • Relevant cybersecurity certification preferred, such as CISSP, CISM, GIAC, or equivalent. • Working knowledge of SOC processes, including log onboarding, detection use cases, alert triage, escalation, and operational handoff. • Familiarity with SIEM and security monitoring technologies, as well as common cloud, infrastructure, application, and identity log sources. • Understanding of cybersecurity and risk frameworks, such as NIST CSF, CRI, MITRE ATT&CK/D3FEND, and the ability to apply them to monitoring requirements and control design. • Experience coordinating work across application, technology, cybersecurity, risk, control, audit, and business stakeholders. • Ability to document requirements, procedures, decisions, risks, action plans, metrics, and implementation evidence clearly and consistently. •

Similar jobs

• Cybersecurity Operations Specialist 720 — Freedomconsulting · St. Louis, MO
• Cybersecurity Operations Engineer — The University of Texas at Austin · AUSTIN, TX
• Senior Cyber Threat Defense - Security Operations Engineer — Proofpoint · Draper, UT
• IT Cybersecurity Operations Manager — KLA · Ann Arbor, MI
• IT Cybersecurity Operations Manager — Kla (AnnArbor) · Ann Arbor, MI
• Security Operations Center Specialist — Greenthumbindustries · Chicago, Illinois, United States
• Security Operations Center Specialist — Brinks · Springfield Gardens NY
• Cyber Security Operations Specialist I - Tier 1 — CACI · St. Louis, MO