> Markdown version of [/jobs/ext/2041219-vice-president-risk-and-control-lead-architecture-middleware-and-data-management](https://www.wearedevelopers.com/jobs/ext/2041219-vice-president-risk-and-control-lead-architecture-middleware-and-data-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Vice President, Risk and Control Lead - Architecture, Middleware and Data Management - **Company:** Mitsubishi UFJ Financial Group - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Spreadsheets, Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Disaster Recovery, Middleware, Identity and Access Management, Workflow Management Systems, IT General Controls (ITGC), Data Analytics, Data Management, Tools for Reporting - **Published:** August 13, 2026 - **Apply:** https://mufgub.wd3.myworkdayjobs.com/MUFG-Careers/job/London/Vice-President--Risk-and-Control-Lead---Architecture--Middleware-and-Data-Management_10078602-WD ## About the Role * Strong understanding of technology risk, IT controls and control frameworks such as COBIT, NIST, ISO 27001, ITIL and related financial services control expectations. * Experience in first line technology risk and controls, internal audit, external audit, operational risk, information security or technology assurance within a financial services environment. * Good understanding of application, infrastructure, data, integration and cloud technology risks, including resilience, cyber security, access, change, incident, vulnerability and end-of-life risks. * Experience supporting audit, regulatory or control testing activity, including evidence collection, management action planning and issue closure validation. * Strong knowledge of technology governance processes such as change management, incident/problem management, access management, service resilience, disaster recovery and policy attestation. * Experience producing clear management information, dashboards, risk reports and executive-level materials. * Ability to interpret policy and control requirements and translate them into practical actions for technology teams. * Strong stakeholder management skills, with the ability to influence and constructively challenge senior managers, technical teams and control functions. * Strong written communication skills, with the ability to explain risk and control matters clearly to both technical and non-technical audiences. * Comfortable working with data, spreadsheets, workflow tools and reporting platforms to improve control transparency and reduce manual reporting effort. Personal Requirements * Self-motivated, proactive and comfortable working with limited direction. * Able to balance risk with delivery priorities and apply sound judgement when escalating issues. * Structured, organised and able to manage multiple priorities across a broad technology portfolio. * Clear, concise and credible communicator, able to simplify complex control topics for senior stakeholders. * Collaborative and able to build strong relationships with technology, risk, control, audit and business stakeholders. * Analytical, objective and evidence-led, with strong attention to detail. * Results driven, with a strong sense of ownership and accountability. * Able to work effectively under pressure and to tight deadlines. * Curious and willing to learn new technologies, tools and data-driven approaches to risk management. * Demonstrates a global perspective and an understanding of the financial services and banking environment. We are open to considering flexible working requests in line with organisational requirements. ## Description The Risk and Control Manager will support AMD management by helping maintain a clear, evidence-based view of technology risk, control performance, audit readiness and remediation progress across the AMD portfolio. The role will work closely with AMD application, platform and service owners, Technology Risk & Control, Information Security, Operational Risk, Internal Audit and wider Technology stakeholders., The role is responsible for supporting the AMD leadership team in managing technology risk and controls across the AMD function. This includes maintaining risk and control MI, coordinating control testing and evidence, supporting risk appetite reporting, tracking issues and remediation actions, preparing for audits and regulatory reviews, and helping AMD teams operate in line with Technology policies, standards and governance requirements., * Partner with AMD management, service owners, control owners and lines of defence to identify, document, assess and manage technology risks, controls, issues and actions. * Support the definition, maintenance and reporting of AMD's risk appetite measures, including measures that are meaningful from a risk perspective, capable of being tracked, and within AMD's ability to influence. * Develop and maintain clear MI, dashboards and reporting for AMD risks and controls, including risks relating to vulnerabilities, end-of-life technology, incident management, change management, access management, resilience, data protection and operational hygiene. * Coordinate control evidence across AMD teams for audits, self-assessments, control testing, regulatory reviews and management assurance activities, ensuring responses are complete, accurate and timely. * Track audit findings, self-identified issues, risk acceptances, management actions and remediation plans, providing early escalation where delivery is off track, ownership is unclear or risk remains outside tolerance. * Validate issue closure evidence before submission to the relevant governance, control or audit function, ensuring that remediation is sustainable and appropriately evidenced. * Support AMD teams in the operation of core Technology governance processes, including change management, incident management, privileged access management, disaster recovery, business impact analysis and policy compliance. * Work with Technology Risk & Control, Information Security, Operational Risk, Internal Audit and Head Office stakeholders to ensure AMD requirements are understood, coordinated and delivered. * Challenge unclear ownership, weak evidence, inconsistent controls and incomplete risk assessments in a constructive and practical manner. * Promote a strong risk and control culture within AMD by improving awareness, clarity of ownership and management understanding of key technology risk topics. * Identify opportunities to simplify, automate and improve risk and control reporting, including use of data sources, workflow tools and analytics to reduce manual effort and improve transparency. * Prepare concise, senior-management-ready materials for AMD governance meetings, risk forums, executive committees and other oversight bodies as required. ## Related Videos - [Developer’s Perspective: Overview of the Tezos Blockchain Ecosystem](https://www.wearedevelopers.com/videos/237-developer-s-perspective-overview-of-the-tezos-blockchain-ecosystem) - [Launching a marketplace on-time: A lesson in taking shortcuts using spreadsheets!](https://www.wearedevelopers.com/videos/477-launching-a-marketplace-on-time-a-lesson-in-taking-shortcuts-using-spreadsheets) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Microservices architecture as a key element in building trading systems for global finance markets](https://www.wearedevelopers.com/videos/1196-microservices-architecture-as-a-key-element-in-building-trading-systems-for-global-finance-markets) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Exploring BOS: The Blockchain Operating System by NEAR Protocol](https://www.wearedevelopers.com/videos/781-exploring-bos-the-blockchain-operating-system-by-near-protocol) ## Related Articles - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)