Cyber GRC Engineering & Automation

What the role needs

• SMBC is seeking a Vice President, GRC Engineering & Automation within the Information Security organization.
• Serve as the operational leader for Cyber GRC engineering, automation, and governance technology capabilities.
• Act as the Cyber GRC business owner and primary point of contact for the Makoto (SAI360) platform, ensuring alignment with Cyber Governance processes, objectives, and strategic priorities.
• Lead platform enhancements, releases, testing activities, production deployments, and backlog prioritization to ensure Cyber GRC platforms remain effective, scalable, and aligned with business needs.
• Design, develop, and implement workflow automation, system integrations, and technical solutions that improve efficiency, reduce manual effort, and enhance governance process effectiveness.
• Partner closely with Technology, Risk Management, Compliance, Audit, Operations, and Cyber Governance stakeholders to translate business requirements into sustainable technical solutions.
• Maintain alignment and integration across Makoto, ServiceNow, Power BI, Databricks, and other governance-related platforms, ensuring consistent workflows, reporting, and data management practices.
• Partner with the Cyber Risk Treatment team to support integration of risk and issue management processes with broader Cyber GRC workflows, reporting, and automation capabilities.
• Evaluate and implement opportunities for responsible use of artificial intelligence, automation, and advanced analytics within Cyber GRC processes while ensuring appropriate governance and oversight.
• Establish and maintain controls, monitoring, and reporting capabilities to support data quality, process integrity, auditability, and regulatory expectations.
• Manage and develop a team of engineers, analysts, and consulting resources while fostering a culture of continuous improvement, technical innovation, automation, and data-driven decision-making.
• Provide strategic and technical leadership for Cyber GRC platforms, data architecture, reporting, and automation capabilities, helping shape the long-term governance technology roadmap.

From the employer

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges. In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd. JOB SUMMARY SMBC is seeking a Vice President, GRC Engineering & Automation within the Information Security organization. This role is responsible for the engineering, administration, automation, and ongoing evolution of Cyber Governance, Risk, and Compliance (GRC) platforms, workflows, reporting, and data. The position serves as the primary Cyber point-of-contact for the Makoto (SAI360) GRC platform and is responsible for ensuring its Cyber GRC workflows are efficient, scalable, measurable, and supported by reliable data and automation. The Vice President will partner closely with stakeholders in Cyber GRC, Technology, Risk Management, the Business Controls Office, and the Makoto delivery team to transform GRC requirements into sustainable workflows, integrations, dashboards, and monitoring capabilities. The role maintains a solid reporting line within Cyber Governance and works closely with Technology partners supporting the broader enterprise GRC platform. Success in this role requires an individual who can operate comfortably between governance, technology, and data disciplines, translating business requirements into practical platform solutions while maintaining strong governance and control over data quality, workflows, and automation. PRINCIPAL DUTIES & RESPONSBILITIES • Serve as the operational leader for Cyber GRC engineering, automation, and governance technology capabilities. • Act as the Cyber GRC business owner and primary point of contact for the Makoto (SAI360) platform, ensuring alignment with Cyber Governance processes, objectives, and strategic priorities. • Define and maintain Cyber GRC workflows, forms, business rules, dashboards, reporting requirements, and automation capabilities supporting policies, standards, controls, assessments, issues, regulatory obligations, and other governance processes. • Lead platform enhancements, releases, testing activities, production deployments, and backlog prioritization to ensure Cyber GRC platforms remain effective, scalable, and aligned with business needs. • Design, develop, and implement workflow automation, system integrations, and technical solutions that improve efficiency, reduce manual effort, and enhance governance process effectiveness. • Partner closely with Technology, Risk Management, Compliance, Audit, Operations, and Cyber Governance stakeholders to translate business requirements into sustainable technical solutions. • Maintain alignment and integration across Makoto, ServiceNow, Power BI, Databricks, and other governance-related platforms, ensuring consistent workflows, reporting, and data management practices. • Partner with the Cyber Risk Treatment team to support integration of risk and issue management processes with broader Cyber GRC workflows, reporting, and automation capabilities. • Evaluate and implement opportunities for responsible use of artificial intelligence, automation, and advanced analytics within Cyber GRC processes while ensuring appropriate governance and oversight. • Establish and maintain controls, monitoring, and reporting capabilities to support data quality, process integrity, auditability, and regulatory expectations. • Manage and develop a team of engineers, analysts, and consulting resources while fostering a culture of continuous improvement, technical innovation, automation, and data-driven decision-making. • Provide strategic and technical leadership for Cyber GRC platforms, data architecture, reporting, and automation capabilities, helping shape the long-term governance technology roadmap. REQUIRED QUALIFICATIONS • Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or a related field. • 6+ years of experience supporting GRC platforms, governance technology, workflow automation, data engineering, or related disciplines. • Experience administering or supporting enterprise GRC platforms (e.g., SAI360, ServiceNow, Archer, MetricStream, comparable platforms) • Hands-on proficiency with SQL and modern programming/scripting languages (e.g., Java, JavaScript, Python, PowerShell), including the ability to design, develop, troubleshoot, and implement workflow automation, integrations, reporting solutions, and platform enhancements. • Experience working with web application technologies and platform configuration frameworks, including JavaScript, JSON, APIs, and related technologies. • Advanced proficiency with Microsoft Power BI and related data technologies, including data modeling, DAX, Power Query, dashboard development, and integration of multiple data sources to build and maintain governance, risk, compliance, and operational reporting solutions. • Experience gathering and translating business requirements into technical solutions. • Experience managing platform backlogs, releases, testing, and stakeholder requirements. • Strong understanding of governance, risk, control, and compliance concepts. • Strong written and verbal communication skills. NICE TO HAVE • Experience with SAI360 / Makoto. • Experience supporting Continuous Controls Monitoring programs. • Experience with Databricks, Power BI, SQL, and ServiceNow. • Experience supporting risk registers, issue management, or regulatory-management workflows. • Familiarity with cyber governance frameworks, including CRI Profile, FFIEC, NIST CSF, NIST SP 800-53, ISO 27001, NYDFS Part 500 • Experience working in financial services. • Certifications such as Microsoft Power BI Data Analyst Associate (PL-300), Microsoft Fabric Analytics Engineer Associate (DP-600), ServiceNow Certified System Administrator (CSA) or Certified Application Developer (CAD), Databricks Certified Data Engineer Associate, CISSP, CRISC, CISA, or equivalent cybersecurity/governance certification SMBC’s employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required. SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.