GRC Manager (Associate)

Smbc • New York, NY

429d • $90,000 - $135,000 • Remote

About The Position

The GRC Manager (Associate) at SMBC Group is responsible for managing audit and regulatory requirements for the Information Security team. This role involves leading audits, coordinating requests, managing stakeholder relationships, and ensuring efficient processes throughout the audit lifecycle. The manager will also oversee junior team members and contribute to continuous improvement initiatives within the Audit & Regulatory Management (ARM) program.

Requirements

• Bachelor's degree in information technology, Information Security, or related field.
• 5+ years of IT audit experience, preferably with Big 4 firms.
• Designations in information security and IT risk fields such as CISA, CISSP, CISM, CRISC.
• Strong knowledge of General IT Controls, risk, and best practices related to Information Security.
• Strong knowledge of IT Auditing concepts, processes, and types of audits.
• Strong knowledge of Cyber Security regulations and information security best practices.

Nice To Haves

• Experience in a hands-on management role.
• Familiarity with audit tools and methodologies.
• Experience in training and mentoring junior staff.

Responsibilities

• Lead role for a single audit or full responsibility for multiple sections across a group of audits.
• Manage the facilitation and coordination of audit request and issue management activities.
• Communicate effectively and timely with auditors to affirm their understanding of the controls in place.
• Articulate key controls to auditors and stakeholders, advocating for these controls.
• Manage preliminary audit findings and engage with auditors for completeness and accuracy.
• Assist Service Providers in drafting formal management responses to confirmed findings.
• Manage and track audit issues to closure, providing periodic status updates.
• Maintain the ARM Evidence Repository for leveraging evidence across audits.
• Promote the use of the central ARM tool and review dashboard metrics for accuracy.
• Take an active role in projects for continuous improvement in the ARM Program.
• Create professional training materials on ARM Process and Tools and lead educational initiatives.
• Provide direction to ARM Specialist / ARM Senior Specialist in audit requests.
• Complete independently ARM activities requested by management, clients, auditors, and regulators.
• Continuously ensure professional development through training and certifications.

Benefits

• Competitive salary range between $90,000 and $135,000.
• Annual discretionary incentive award eligibility.
• Comprehensive benefits package including health insurance, retirement plans, and more.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: Bachelor's degree
• Number of Employees: 10,001+ employees