Cyber GRC Engineering & Automation

SMBC • Charlotte, NC

1d • Hybrid

About The Position

SMBC is seeking a Vice President, GRC Engineering & Automation within its Information Security organization. The role is responsible for engineering, administering, automating, and evolving Cyber Governance, Risk, and Compliance (GRC) platforms, workflows, reporting, and data. The position serves as the primary Cyber point of contact and business owner for the Makoto (SAI360) GRC platform, ensuring Cyber GRC workflows are efficient, scalable, measurable, and supported by reliable data and automation.

The Vice President partners with stakeholders across Cyber GRC, Technology, Risk Management, the Business Controls Office, and the Makoto delivery team to translate GRC requirements into sustainable workflows, integrations, dashboards, and monitoring capabilities. The role maintains a solid reporting line within Cyber Governance and works closely with Technology partners supporting the broader enterprise GRC platform. Success requires bridging governance, technology, and data disciplines while maintaining strong governance and control over data quality, workflows, and automation.

Requirements

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or a related field.
• At least 6 years of experience supporting GRC platforms, governance technology, workflow automation, data engineering, or related disciplines.
• Experience administering or supporting enterprise GRC platforms such as SAI360, ServiceNow, Archer, MetricStream, or comparable platforms.
• Hands-on proficiency with SQL and modern programming or scripting languages such as Java, JavaScript, Python, or PowerShell, including the ability to design, develop, troubleshoot, and implement workflow automation, integrations, reporting solutions, and platform enhancements.
• Experience with web application technologies and platform configuration frameworks, including JavaScript, JSON, APIs, and related technologies.
• Advanced proficiency with Microsoft Power BI and related data technologies, including data modeling, DAX, Power Query, dashboard development, and integrating multiple data sources for governance, risk, compliance, and operational reporting.
• Experience gathering and translating business requirements into technical solutions.
• Experience managing platform backlogs, releases, testing, and stakeholder requirements.
• Strong understanding of governance, risk, control, and compliance concepts.
• Strong written and verbal communication skills.

Nice To Haves

• Experience with SAI360 / Makoto.
• Experience supporting Continuous Controls Monitoring programs.
• Experience with Databricks, Power BI, SQL, and ServiceNow.
• Experience supporting risk registers, issue management, or regulatory-management workflows.
• Familiarity with cyber governance frameworks, including CRI Profile, FFIEC, NIST CSF, NIST SP 800-53, ISO 27001, and NYDFS Part 500.
• Experience working in financial services.
• Certifications such as Microsoft Power BI Data Analyst Associate (PL-300), Microsoft Fabric Analytics Engineer Associate (DP-600), ServiceNow Certified System Administrator (CSA) or Certified Application Developer (CAD), Databricks Certified Data Engineer Associate, CISSP, CRISC, CISA, or an equivalent cybersecurity/governance certification.

Responsibilities

• Serve as the operational leader for Cyber GRC engineering, automation, and governance technology capabilities.
• Act as the Cyber GRC business owner and primary point of contact for the Makoto (SAI360) platform, aligning it with Cyber Governance processes, objectives, and strategic priorities.
• Define and maintain Cyber GRC workflows, forms, business rules, dashboards, reporting requirements, and automation for policies, standards, controls, assessments, issues, regulatory obligations, and other governance processes.
• Lead platform enhancements, releases, testing, production deployments, and backlog prioritization.
• Design, develop, and implement workflow automation, system integrations, and technical solutions that improve efficiency, reduce manual effort, and enhance governance processes.
• Partner with Technology, Risk Management, Compliance, Audit, Operations, and Cyber Governance stakeholders to translate business requirements into sustainable technical solutions.
• Maintain alignment and integration across Makoto, ServiceNow, Power BI, Databricks, and other governance-related platforms, including consistent workflows, reporting, and data management practices.
• Partner with the Cyber Risk Treatment team to integrate risk and issue management with broader Cyber GRC workflows, reporting, and automation.
• Evaluate and implement responsible uses of artificial intelligence, automation, and advanced analytics in Cyber GRC processes, with appropriate governance and oversight.
• Establish and maintain controls, monitoring, and reporting to support data quality, process integrity, auditability, and regulatory expectations.
• Manage and develop a team of engineers, analysts, and consulting resources, fostering continuous improvement, technical innovation, automation, and data-driven decision-making.
• Provide strategic and technical leadership for Cyber GRC platforms, data architecture, reporting, and automation, helping shape the long-term governance technology roadmap.

Benefits

• Hybrid workforce model offering an opportunity to work from home as well as from an SMBC office.
• Reasonable accommodations during candidacy for applicants with disabilities, consistent with applicable federal, state, and local law.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior