The selected colleague will work at an MUFG office or client sites four days per week and work remotely one day. A member of our recruitment team will provide more details. The Cybersecurity Operations Execution Specialist supports the Security Operations Center (SOC) and Regional Execution Office (REO) by designing, standardizing, and supporting the implementation of security monitoring controls for applications across the enterprise. This role partners closely with application owners, technology teams, business stakeholders, and SOC teams to understand application architectures and risk profiles, define appropriate monitoring requirements, and ensure controls are implemented effectively. The role also helps centralize security monitoring practices across regions and business lines, advances global standards and reusable patterns, and improves the maturity and transparency of the organization's cybersecurity monitoring posture. Key Responsibilities: Security Monitoring Control Design & Execution • Support the design and implementation of security monitoring controls for applications and technology environments, aligned with the organization's cybersecurity strategy and risk management framework. • Translate relevant risks, threat scenarios, and application characteristics into clear monitoring requirements and detection use cases. • Help ensure monitoring controls are practical, supportable, and aligned with SOC operating processes. Stakeholder Partnership & Risk Profiling • Partner with application owners, technology teams, business stakeholders, and cybersecurity teams to understand application architectures, data flows, logging capabilities, and risk profiles. • Determine appropriate security monitoring requirements based on the application's risk, technology, and operating context. • Guide stakeholders throughout the monitoring onboarding lifecycle to ensure controls are implemented effectively. Control Implementation, Testing & Operationalization • Coordinate with SOC, engineering, and application teams to implement defined monitoring controls and supporting log sources. • Ensure completed controls are documented, transitioned into operations, and supported by appropriate procedures and ownership. Centralization & Standardization • Help centralize and standardize security monitoring controls across regions, entities, and business lines. • Contribute to global standards, reusable monitoring patterns, onboarding procedures, and governance documentation. • Identify opportunities to reduce duplication and improve consistency across SOC monitoring services. Operations Maturity, Metrics & Reporting • Support initiatives that improve the maturity, efficiency, and transparency of security monitoring operations. • Identify and maintain meaningful metrics and data sources that help stakeholders understand onboarding progress, control coverage, risk posture, and operational effectiveness. • Prepare status updates and reporting for governance forums, leadership, risk partners, and other stakeholders. • Develop automations to increase team efficiency and sustainability. Gap Identification & Remediation • Collaborate with cybersecurity, risk, control, audit, and technology teams to identify gaps in monitoring coverage or control implementation. • Document gaps, coordinate remediation plans, track actions to completion, and escalate barriers when needed. • Support evidence collection and clear documentation for risk, control, and audit activities. Service Enablement & Entity Engagement • Build and maintain relationships with regional entities and teams that receive SOC monitoring services. • Gather stakeholder feedback, translate needs into actionable plans, and coordinate those plans through completion. • Promote clear expectations, shared accountability, and effective communication between service providers and service recipients. Qualifications: • At least 2 years of experience in cybersecurity risk management, cybersecurity operations, security monitoring, incident response, security engineering, technology risk, or a related discipline. • Bachelor's degree in Cybersecurity, Information Technology, Risk Management, or a related field, or equivalent professional experience. • Experience evaluating applications or technologies to determine applicable cybersecurity controls. • Relevant cybersecurity certification preferred, such as CISSP, CISM, GIAC, or equivalent. • Working knowledge of SOC processes, including log onboarding, detection use cases, alert triage, escalation, and operational handoff. • Familiarity with SIEM and security monitoring technologies, as well as common cloud, infrastructure, application, and identity log sources. • Understanding of cybersecurity and risk frameworks, such as NIST CSF, CRI, MITRE ATT&CK/D3FEND, and the ability to apply them to monitoring requirements and control design. • Experience coordinating work across application, technology, cybersecurity, risk, control, audit, and business stakeholders. • Ability to document requirements, procedures, decisions, risks, action plans, metrics, and implementation evidence clearly and consistently. • Strong analytical, problem-solving, project coordination, communication, and stakeholder engagement skills. • Ability to manage multiple priorities, follow work through to completion, and operate effectively in a regional and global environment. Education • Bachelor's degree in Computer Science or a closely-related discipline, or an equivalent combination of formal education and experience • Visa sponsorship/support is based on business needs. We do not anticipate providing visa sponsorship/support for this position. • The typical base pay range for this role is as follows: • New York / New Jersey: $102k-153k • Non-New York / New Jersey: $102k-141k depending on job-related knowledge, skills, experience and location. This role may also be eligible for certain discretionary performance-based bonus and/or incentive compensation. Additionally, our Total Rewards program provides colleagues with a competitive benefits package (in accordance with the eligibility requirements and respective terms of each) that includes comprehensive health and wellness benefits, retirement plans, educational assistance and training programs, income replacement for qualified employees with disabilities, paid maternity and parental bonding leave, and paid vacation, sick days, and holidays. For more information on our Total Rewards package, please click the link below. • Our hybrid work schedule is four days on-site and work remotely one day per week. • MUFG Benefits Summary The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities duties and skills required of personnel so classified.