Number of Direct Reports

2

Main Purpose of the Role

The Cyber Security Transition Manager is responsible for providing business-aligned cyber security leadership, managing information risk, ensuring regulatory compliance, and leading security remediation and transformation programmes. The role acts as the bridge between business, technology, risk, and security functions to reduce cyber risk while enabling business objectives through effective governance, stakeholder engagement, and project delivery.

Key Responsibilities

• Serve as the trusted security advisor for business and technology stakeholders.
• Translate cyber security requirements into practical business controls and risk mitigation strategies.
• Ensure security requirements are embedded within projects, programmes, and service lifecycles.
• Facilitate security reviews covering:
  • Cloud Services
  • Vendor Onboarding
  • Business Initiatives
  • Application Development
• Promote security awareness and risk ownership across business functions.
• Support executive stakeholders in understanding security posture and risk exposure.
• Act as the first line of defence risk representative for assigned business units and technology domains.
• Maintain oversight of information security, technology, cyber, and operational risks affecting business services.
• Perform risk assessments and control evaluations for applications, infrastructure, cloud services, and third-party providers.
• Review and challenge risk acceptances, compensating controls, and exception requests.
• Ensure risks are identified, documented, tracked, mitigated, and reported through established governance processes.
• Support the development and maintenance of risk registers and remediation plans.
• Monitor emerging cyber threats, vulnerabilities, and regulatory developments that may impact the business.

Work Experience

• 10+ years in cybersecurity or security engineering
• Experience in cloud-native or hybrid environments
• Experience with enterprise security tooling
• Experience working with cross-functional engineering teams

Skills and Experience

Functional / Technical Competencies:

• Strong knowledge of:
  • Information Security
  • Cybersecurity Risk Management
  • Operational Resilience
  • Third-Party Risk Management
  • Security Governance
• Experience managing complex technology or cybersecurity projects.
• Experience supporting audits and regulatory remediation activities.
• Ability to translate technical risks into business-focused language.
• Strong stakeholder management and communication skills.
• Experience producing executive-level management information and reporting.

Personal Requirements

• Results driven, with a strong sense of accountability
• A proactive, motivated approach.
• The ability to operate with urgency and prioritise work accordingly
• Strong decision-making skills, the ability to demonstrate sound judgement
• A structured and logical approach to work
• Strong problem-solving skills
• A creative and innovative approach to work
• Excellent interpersonal skills
• The ability to manage large workloads and tight deadlines
• Excellent attention to detail and accuracy
• A calm approach, with the ability to perform well in a pressurised environment
• Excellent Communication skills

We are open to considering flexible working requests in line with organisational requirements.

MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.

We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.