Vice President, Identity and Access Management

**Responsibilities**:
The IRMD Identity and Access Management (IAM) Lead oversees and manages the IAM team to ensure that key activities in the department relating to User ID and Privileged ID control and governance are delivered in order to mitigate IT risk to MUFG Bank across Asia Pacific region. This position is accountable for the overall development of strategic roadmap in the access control domain and ensures alignment with the overall global access management strategy.

**Identification Access Management Functions**
- Manage IAM team to cover the full life cycle of user’s identity and access management, including user onboarding, transfer and off boarding for APAC region.
- Define and implement the department's User Access Control Management framework and ensure access is provisioned in accordance with global IAM policy, regulatory guidelines, established standards and procedures.
- Define the regional identity access management strategy and roadmap to provide end-to-end user life cycle management capabilities and enhance detective control to prevent any unauthorized access.
- Continuously review, perform gap analysis and identify opportunities to streamline and automate user access control for the region to ensure that the design controls are effective and efficient.
- Manage and perform risk assessment for new system on-boarding and system enhancement to ensure relevant security controls (preventive, detective, mitigation) in user access control, audit trail and security log monitoring requirements are incorporated into new/enhance systems prior to system rollout.
- Work with other teams to enhance cyber threat assessment, security event monitoring and cyber incident response across the Asia Pacific region aligning with the global direction.
- Manage regional Identity access management project and initiatives to ensure the objectives and capability are delivered within scope, on time and on budget.
- Established and promote adoption of regional toolset, standards and processes for user access management in APAC region.
- Provides support for both internal and external audit inspection activities, draft responses as required from the local authorities, second or third line of defences, oversees remediation action and timeline and track for completion.

**Customer**
- Develop and maintain strong stakeholder management with key stakeholders within MUFG.
- Work in partnership with colleagues in the global teams in the regional offices of Japan, Europe, America and other offices to share knowledge, support regional/global initiatives and best practices on identity access management.
- Work in partnership with colleagues in the Asia Pacific region to play a regional role to support regional identity access management improvement plans to ensure a consistent level of maturity in technology and processes across the region.
- Work in partnership with various departments within ASO and regional branches to implement appropriate access control projects to uplift the current access management capability against the various cyber threats and to meet regulatory expectations.
- Manage and ensure all users’ queries are attended to, processed and responded to timely for local and regional.

**People**
- Responsible for managing (e.g. objective setting & performance management) and developing (e.g. coaching, career progression & training) staff in the region.
- Develop and enhance team member technical knowledge and skills through professional certification, product training and soft skills courses.
- Ensure team adherence to all company policies / guidelines.
- Support, coach, guide and motivate the team on complex access related matters.

**Job Requirements**:

- Minimum 5 years of team leadership experience and 10 years of work experiences in Identity Access Management domain and compliance regulation field, such as MAS TRMG.
- Experience with Identity Access Management solution such as OIG, OIM, Sailpoint ,Privileged Identity Management solutions such as Cyberark and Privileged Identity monitoring solutions such as Splunk.
- Experience in access administration, complete user life cycle knowledge (joiner, mover and leaver), access enforcement (authentication protocols) and access governance (certification, logging and monitoring).
- Prior experience or exposure to the banking or finance industry, with good understanding of corporate banking products and services.
- Excellent written and verbal communication skills with ability to influence and communicate effectively with senior management, Heads of department, technical managers and other key stakeholders.
- Strong stakeholder management skills to collaborate with Head Office, regional and branch offices.
- Self-driven and independent, with good attention to detail and quality.
- Willing to take on new tasks and initiatives to contribute towards continuous improvement.
- We regret to inform that only shortlisted applicants will be notified.- Job ID: 10061063