Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 150,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

MUFG has a global network spanning 50+ markets, with over 2,000 offices worldwide, and over 360 years of history. We offer services across commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing, providing stability and expertise in a dynamic financial landscape.

This temporary assignment will be working at MUFG, and may involve working at an MUFG site, you will however be contracted through Magnit Global, a UK registered employment business with the company registration number 05537535.

About the role:

IT Risk, Security & Control department covers cyber security strategy maintenance and tactical planning and operations to provide IT Security protection, governance, risk management and reporting. This includes promoting HO ISSP requirements and local security requirements. The department supports and monitors security solutions such as virus protection, vulnerability management, compliance monitoring and threat/incident management activities to reduce risk.

Senior Techno-Functional SME operating across IAM, Microsoft Entra (Azure AD), Cloud, and Data Security(Varonis).

Key Responsibilities:

• Gather, analyse, and refine business and security requirements, translating them into practical IAM and cloud security solutions
• Perform gap analysis and impact assessments to identify control weaknesses and support SII remediation plans
• Define business rules, access models, and data mappings across identity, access, and data domains
• Support UAT, validation, and implementation, ensuring solutions meet both business and security objectives
• Contribute to the design and enhancement of global Microsoft Entra ID (Azure AD), including:
  • Identity lifecycle (JML), provisioning, SSO, MFA
  • Conditional Access, PIM, and Identity Protection
• Support secure onboarding of applications and SaaS platforms, aligned to hybrid identity (AD + Entra ID)
• Define and validate IAM requirements across cloud platforms (Azure, AWS, SaaS), supporting:
  • RBAC / ABAC access models
  • Least privilege and Zero Trust principles
  • Federation and privileged access controls
• Ensure IAM controls align with cloud security architecture and standards
• Work closely with project manager to assist with artefacts needed to ensure project governance and delivery assurance
• Support implementation and validation of data security and access governance controls using tools such as Varonis, including:
  • Data classification, access monitoring, and auditing
• Identify excessive or inappropriate access and support remediation actions aligned to data protection policies
• Define and support integration requirements across:
  • AD/LDAP, HR systems, and enterprise applications
• Ensure consistency across identity data, access controls, and security tooling
• Support access governance and compliance activities, including SoD and certifications
• Identify security risks and control gaps, contributing to remediation aligned with regulatory and audit requirements
• Collaborate with Security, Risk, HR, Data, and Engineering teams, engaging stakeholders, and vendors to ensure clear requirements and effective delivery

Key Skills/Experience:

1. Functional / Technical Competencies:
2. Essential

• 7-10 years as Techno-Functional Analyst / IAM SME 
• Strong expertise in IAM 
• Solid knowledge of core IAM and Cloud Security principles 
• Experience with: 
  • Cloud (Azure, AWS, SaaS) and hybrid IAM
  • Conditional Access, PIM, SSO, federation
  • Varonis or similar data security tools
• Understanding of Data Security intiatived and IAM integrations and enterprise environments 
• Strong understanding of regulatory and audit requirements in financial services 

1.  
2. Education / Qualifications:
3. Essential

• Degree educated and / or equivalent experience
• Certifications (desirable) 
  • Cloud security (Azure/AWS Security)
  • CISSP, CISM, or IAM-related certification

MUFG is committed to diversity and inclusion, valuing all employees and opposing discrimination based on age, gender, sexual orientation, disability, race, religion, or any other protected characteristic. Recruitment decisions are made fairly, focusing on the right skills for the role. This temporary assignment will be working at MUFG, and may involve working at an MUFG site, you will however be contracted through Magnit Global, a UK registered employment business with the company registration number 05537535.

Magnit Global is a leading, global professional services and technology company. We have been a leader in contingent workforce management since 1991 and work with leading Fortune 500 companies and other large organizations across numerous verticals including consumer electronics, research and development, pharmaceuticals, health services, and many more. To do our best work we need different viewpoints. Therefore, we celebrate diversity and embrace inclusion. As an equal opportunity employer, we are dedicated to building a team that represents a variety of backgrounds, perspectives, and skills. We strive to ensure that we maintain a positive and enriching work environment for all.