GRC Sr. Manager (JRIA Security), VP

Sumitomo Mitsui Banking Corporation•Charlotte, NC

20d•Hybrid

About The Position

SMBC is seeking an experienced Senior Cybersecurity Regulatory Readiness Manager to join its Audit & Regulatory Management (ARM) team within Cybersecurity. This senior, hands-on role focuses on strengthening Cybersecurity’s Regulatory Readiness program and preparing the organization for regulatory examinations, supervisory reviews, and compliance assessments. The position works closely with Cybersecurity, Risk, Audit, Compliance, and Technology teams to coordinate regulatory engagements, assess readiness, and strengthen the overall control environment. It is suited to an experienced professional from cybersecurity governance, technology risk, IT audit, regulatory compliance, or assurance who has managed complex regulatory engagements in financial services; it is not a traditional Internal Audit role. SMBC uses a hybrid workforce model that offers employees the opportunity to work from home and from an SMBC office. Employees must live within a reasonable commuting distance of their office location. Candidates will learn more about the specific hybrid schedule during the interview process. Hybrid work may not be permitted for certain roles.

Requirements

At least 7 years of experience in cybersecurity, information security, IT audit, technology risk, regulatory compliance, control governance, or a related area.
Demonstrated experience managing regulatory examinations, supervisory reviews, or regulatory readiness programs within financial services.
Strong understanding of cybersecurity regulation, technology risk, and control environments.
Strong stakeholder management and communication skills, including the ability to engage confidently with senior, technical, and non-technical stakeholders.
Strong analytical, organizational, and reporting skills, with the ability to manage multiple complex priorities.

Nice To Haves

Knowledge of cybersecurity regulatory requirements and control frameworks; exposure to DORA, NYSDFS Part 500, FFIEC guidance, or Federal Reserve expectations is advantageous.
Experience conducting regulatory gap assessments, control maturity reviews, compliance assessments, or readiness evaluations.
Ability to interpret evolving regulatory requirements and translate them into practical cybersecurity controls and risk management activities.
Experience within a global bank or financial services organization.
Previous Big Four consulting, technology risk, or audit experience.
Professional certification such as CISA, CRISC, CISM, or equivalent.
Experience implementing governance, compliance, or regulatory readiness technology solutions.
Strong familiarity with cybersecurity control and assurance frameworks.

Responsibilities

Support the continued development and enhancement of Cybersecurity’s Regulatory Readiness program, focusing on governance, assessment methodology, reporting, and forward planning.
Coordinate cybersecurity regulatory examinations, supervisory reviews, and regulatory enquiries, ensuring responses and supporting evidence are accurate and delivered on time.
Conduct regulatory readiness assessments, control reviews, and gap analyses against applicable regulatory requirements and industry frameworks.
Identify and track regulatory readiness gaps and remediation actions through established risk and issue management processes.
Maintain traceability between regulatory requirements, cybersecurity controls, evidence, findings, and remediation activities.
Partner with Cybersecurity, Technology, Risk, Audit, and Compliance teams to strengthen regulatory preparedness.
Monitor emerging cybersecurity regulatory developments and industry trends and assess their potential impact on the Cybersecurity program.
Produce management information and executive reporting on regulatory developments, assessment outcomes, remediation progress, and areas of supervisory focus.
Drive the development and implementation of tools and processes that improve regulatory readiness, evidence management, and reporting.
Lead continuous improvement initiatives across the ARM program and promote consistent regulatory readiness practices.