Cyber GRC Engineering & Automation

Sumitomo Mitsui Banking Corporation•Charlotte, NC

3d•Hybrid

About The Position

SMBC is seeking a Vice President, GRC Engineering & Automation within its Information Security organization. This role leads the engineering, administration, automation, and ongoing evolution of Cyber Governance, Risk, and Compliance (GRC) platforms, workflows, reporting, and data. The position serves as the primary Cyber point of contact and business owner for the Makoto (SAI360) GRC platform, ensuring that Cyber GRC workflows are efficient, scalable, measurable, and supported by reliable data and automation. The Vice President partners with stakeholders in Cyber GRC, Technology, Risk Management, the Business Controls Office, and the Makoto delivery team to turn GRC requirements into sustainable workflows, integrations, dashboards, and monitoring capabilities. The role maintains a solid reporting line within Cyber Governance and works with Technology partners supporting the broader enterprise GRC platform. Success requires combining governance, technology, and data expertise to deliver practical platform solutions while maintaining strong controls over data quality, workflows, and automation. SMBC uses a hybrid workforce model, with work from home and from an SMBC office. Employees must live within a reasonable commuting distance of their office. Candidates will learn the specific hybrid schedule during the interview process; hybrid work may not be permitted for certain roles.

Requirements

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or a related field.
At least 6 years of experience supporting GRC platforms, governance technology, workflow automation, data engineering, or related disciplines.
Experience administering or supporting enterprise GRC platforms, such as SAI360, ServiceNow, Archer, MetricStream, or comparable platforms.
Hands-on proficiency with SQL and modern programming or scripting languages such as Java, JavaScript, Python, or PowerShell, including designing, developing, troubleshooting, and implementing workflow automation, integrations, reporting solutions, and platform enhancements.
Experience with web application technologies and platform configuration frameworks, including JavaScript, JSON, APIs, and related technologies.
Advanced proficiency with Microsoft Power BI and related data technologies, including data modeling, DAX, Power Query, dashboard development, and integrating multiple data sources for governance, risk, compliance, and operational reporting.
Experience gathering and translating business requirements into technical solutions.
Experience managing platform backlogs, releases, testing, and stakeholder requirements.
Strong understanding of governance, risk, control, and compliance concepts.
Strong written and verbal communication skills.

Nice To Haves

Experience with SAI360 / Makoto.
Experience supporting Continuous Controls Monitoring programs.
Experience with Databricks, Power BI, SQL, and ServiceNow.
Experience supporting risk registers, issue management, or regulatory-management workflows.
Familiarity with cyber governance frameworks, including CRI Profile, FFIEC, NIST CSF, NIST SP 800-53, ISO 27001, and NYDFS Part 500.
Experience working in financial services.
Certifications such as Microsoft Power BI Data Analyst Associate (PL-300), Microsoft Fabric Analytics Engineer Associate (DP-600), ServiceNow Certified System Administrator (CSA) or Certified Application Developer (CAD), Databricks Certified Data Engineer Associate, CISSP, CRISC, CISA, or an equivalent cybersecurity or governance certification.

Responsibilities

Serve as operational leader for Cyber GRC engineering, automation, and governance technology capabilities.
Act as Cyber GRC business owner and primary point of contact for the Makoto (SAI360) platform, aligning it with Cyber Governance processes, objectives, and strategic priorities.
Define and maintain Cyber GRC workflows, forms, business rules, dashboards, reporting requirements, and automation for policies, standards, controls, assessments, issues, regulatory obligations, and other governance processes.
Lead platform enhancements, releases, testing, production deployments, and backlog prioritization.
Design, develop, and implement workflow automation, system integrations, and technical solutions that improve efficiency, reduce manual effort, and enhance governance processes.
Partner with Technology, Risk Management, Compliance, Audit, Operations, and Cyber Governance stakeholders to translate business requirements into sustainable technical solutions.
Maintain alignment and integration across Makoto, ServiceNow, Power BI, Databricks, and other governance-related platforms, supporting consistent workflows, reporting, and data management.
Partner with the Cyber Risk Treatment team to integrate risk and issue management processes with broader Cyber GRC workflows, reporting, and automation.
Evaluate and implement responsible uses of artificial intelligence, automation, and advanced analytics in Cyber GRC, with appropriate governance and oversight.
Establish and maintain controls, monitoring, and reporting that support data quality, process integrity, auditability, and regulatory expectations.
Manage and develop a team of engineers, analysts, and consulting resources, fostering continuous improvement, technical innovation, automation, and data-driven decision-making.
Provide strategic and technical leadership for Cyber GRC platforms, data architecture, reporting, and automation, helping shape the long-term governance technology roadmap.