Assistant Vice President, IAM Governance

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

MUFG, one of the world’s leading financial groups with a rich heritage spanning over 350 years, is seeking an Identity and Access Management Governance Manager at Assistant Vice President level to join their IT Risk division in London. This pivotal role offers you the opportunity to shape and oversee the governance of identity and access management processes, ensuring robust risk management and compliance across a multi-year remediation programme. You will be instrumental in supporting the delivery of effective controls, collaborating with diverse teams, and engaging with stakeholders at all levels. The organisation is committed to nurturing talent, fostering shared growth, and building a fair, transparent culture where integrity and responsibility are at the heart of everything they do. With flexible working opportunities, generous training support, and a truly international network, this is your chance to make a meaningful impact within a respected financial services environment.

* Join a globally recognised financial institution with a rich history and extensive international presence, offering unparalleled opportunities for professional development and cross-border collaboration.

* Play a key role in shaping the future of identity and access management governance by supporting critical remediation programmes and ensuring compliance with regulatory standards.

* Benefit from a supportive leadership team, inclusive workplace values, flexible working arrangements, and ongoing training opportunities designed to help you grow your career.

What you'll do:

As an Identity and Access Management Governance Manager, you will play an essential role in overseeing risk management frameworks related to identity and access controls. Your day-to-day responsibilities will involve collaborating with various teams to define robust controls, developing monitoring strategies that provide transparency into performance metrics, coordinating remediation efforts across business units, and preparing detailed reports for governance meetings. You will also facilitate stakeholder engagement in managing toxic combinations within applications, act as a liaison for audit-related activities, address risks within development lifecycles, and ensure that all participants adhere to established standards. Success in this role requires you to be highly organised, delivery-focused, adept at simplifying complex concepts for both technical and non-technical audiences, and able to foster partnerships across diverse groups. Your ability to communicate clearly, build consensus among stakeholders, and maintain meticulous attention to detail will be crucial as you help drive continuous improvement in IAM governance.

* Work closely with the wider Identity and Access Management (IAM) team and other control functions to define key controls for IAM processes, ensuring alignment with audit and regulatory requirements.

* Design effective strategies for continuous control monitoring by developing Key Control Indicators (KCIs) and Key Risk Indicators (KRIs) that assess performance across IAM controls.

* Assist in creating formal testing strategies for IAM controls, collaborating with technical teams to ensure thorough evaluation and remediation.

* Monitor progress on remediation initiatives by partnering with technology and business application owners to ensure commitments are met throughout the programme lifecycle.

* Coordinate the Toxic Combination framework by facilitating full participation from business and technology stakeholders, ensuring violations are managed appropriately.

* Prepare comprehensive management information reports for IAM Governance meetings, transparently communicating process performance and escalating issues as needed.

* Act as a point of contact for addressing IAM risks within the Software Development Lifecycle (SDLC), ensuring risks are mitigated effectively.

* Engage proactively with internal and external audit teams regarding identity and access management risks, providing clear communication and documentation.

* Support the design and delivery of remediation programmes to ensure key risks are addressed efficiently while maintaining compliance with industry standards.

* Facilitate clear communication between organisational functions, business units, and offices both locally and internationally to promote understanding of IAM governance.

What you bring:

Your proven track record in identity and access management within financial services will enable you to bring valuable insights into risk mitigation strategies. You possess deep familiarity with regulatory expectations around technology risk—including audit cycles—and have demonstrated your ability to leverage best practice frameworks like NIST or SOX. Your experience spans both technical competencies (such as developing monitoring indicators or automating data production) as well as interpersonal skills: you excel at building relationships across business units, facilitating clear communication between local and international teams, and presenting complex information concisely. As someone who thrives in collaborative environments, your attention to detail ensures accurate reporting while your strategic thinking helps drive continuous improvement. Your educational background supports your technical expertise; professional certifications further enhance your credibility. Above all, your commitment to fairness, transparency, empathy towards colleagues’ perspectives, dependability under pressure, sensitivity when delivering difficult messages—and enthusiasm for sharing knowledge—will set you apart as an ideal candidate for this position.

* Demonstrable experience within an Identity and Access Management function in a regulated financial services environment is essential for success in this role.

* At least three years’ experience in technology-focused risk or control functions provides you with the foundation needed to understand complex operational challenges.

* Working knowledge of banking or securities products enables credible engagement with application owners on topics such as toxic combinations or segregation of duties.

* Proven understanding of Information Security and Technology Risk management practices ensures you can apply these domains effectively within financial institutions.

* Strong technical knowledge of external laws, regulations (including SOX), policies, frameworks such as NIST or DORA relevant to technology risk is required.

* Experience developing continuous control monitoring strategies—including automation of reporting—demonstrates your commitment to efficiency.

* Ability to develop effective control testing strategies shows your skill in evaluating risk mitigation measures thoroughly.

* Excellent written and verbal communication skills allow you to simplify complex concepts for diverse audiences.

* Educated to degree level; CISSP or CISM qualifications are desirable but not mandatory.

* Meticulous attention to detail combined with strong organisational skills ensures accuracy in reporting and process oversight.

What sets this company apart:

This organisation s