GRC Sr. Manager (JRIA Security), VP

SMBC•Charlotte, NC

18d•Hybrid

About The Position

SMBC is seeking an experienced Senior Cybersecurity Regulatory Readiness Manager to join its Audit & Regulatory Management (ARM) team within Cybersecurity. This senior, hands-on role focuses on strengthening the Cybersecurity Regulatory Readiness programme and preparing the organization for regulatory examinations, supervisory reviews, and compliance assessments. The role works closely with Cybersecurity, Risk, Audit, Compliance, and Technology teams to coordinate regulatory engagements, assess readiness, and strengthen the control environment. It is not a traditional Internal Audit role and is suited to an experienced professional in cybersecurity governance, technology risk, IT audit, regulatory compliance, or assurance who has managed complex regulatory engagements within financial services. SMBC employees participate in a hybrid workforce model that offers the opportunity to work from home and from an SMBC office. Employees must live within a reasonable commuting distance of their office. Candidates will learn more about the specific hybrid schedule during the interview process. Hybrid work may not be permitted for certain roles, including some FINRA-registered positions requiring in-office attendance for the entire workweek.

Requirements

At least 7 years of experience in cybersecurity, information security, IT audit, technology risk, regulatory compliance, control governance, or a related area.
Demonstrated experience managing regulatory examinations, supervisory reviews, or regulatory readiness programmes within financial services.
Strong understanding of cybersecurity regulation, technology risk, and control environments.
Strong knowledge of cybersecurity regulatory requirements and control frameworks.
Experience conducting regulatory gap assessments, control maturity reviews, compliance assessments, or readiness evaluations.
Ability to interpret evolving regulatory requirements and translate them into practical cybersecurity controls and risk management activities.
Strong stakeholder management and communication skills, including the ability to engage confidently with senior, technical, and non-technical stakeholders.
Strong analytical, organizational, and reporting skills, with the ability to manage multiple complex priorities.

Nice To Haves

Exposure to regulatory or supervisory requirements such as DORA, NYSDFS Part 500, FFIEC guidance, or Federal Reserve expectations.
Experience within a global bank or financial services organization.
Previous Big Four consulting, technology risk, or audit experience.
Professional certification such as CISA, CRISC, CISM, or equivalent.
Experience implementing governance, compliance, or regulatory readiness technology solutions.
Strong familiarity with cybersecurity control and assurance frameworks.

Responsibilities

Support the continued development and enhancement of Cybersecurity’s Regulatory Readiness program, focusing on governance, assessment methodology, reporting, and forward planning.
Coordinate cybersecurity regulatory examinations, supervisory reviews, and regulatory enquiries, ensuring responses and supporting evidence are accurate and delivered on time.
Conduct regulatory readiness assessments, control reviews, and gap analyses against applicable regulatory requirements and industry frameworks.
Identify and track regulatory readiness gaps and remediation actions through established risk and issue management processes.
Maintain traceability between regulatory requirements, cybersecurity controls, evidence, findings, and remediation activities.
Partner with Cybersecurity, Technology, Risk, Audit, and Compliance teams to strengthen regulatory preparedness.
Monitor emerging cybersecurity regulatory developments and industry trends and assess their potential impact on the Cybersecurity programme.
Produce management information and executive reporting on regulatory developments, assessment outcomes, remediation progress, and areas of supervisory focus.
Drive the development and implementation of tools and processes that improve regulatory readiness, evidence management, and reporting.
Lead continuous improvement initiatives across the ARM programme and promote consistent regulatory readiness practices.