Information Security Audit & Regulatory Specialist

SMBC Group; Tralee; Hybride; EUR 70 000 - 100 000; Plein temps

Résumé du poste

SMBC Group in Tralee seeks an Information Security Audit & Regulatory Specialist to coordinate audits and regulatory engagements within the Information Security team. You will work with auditors, control owners and subject matter experts to ensure requests are understood, evidenced properly and delivered on time.

This role focuses on moving audit and regulatory governance forward, translating requests into actionable evidence and tracking remediation milestones across engagements.

Qualifications

• Experience in IT audit, technology risk, assurance or cyber security governance.
• Strong understanding of information security controls and evidence requirements.
• Ability to translate audit requests into clear evidence.
• Excellent communication with auditors and control owners.

Responsabilités

• Coordinate information security audits and regulatory engagements from initial request to remediation and closure.
• Manage audit requests, evidence submissions and deadlines across multiple engagements.
• Review evidence to ensure proper documentation and artefacts are provided.
• Work with auditors, control owners and SMEs to clarify audit requirements.
• Translate audit requests into clear requirements for evidence providers.
• Engage with auditors to address queries on information security controls and evidence.
• Review preliminary audit findings and validate accuracy and completeness.
• Track findings and remediation actions to closure.

Connaissances

IT audit

information security

regulatory engagements

audit coordination

stakeholder management

Description du poste

SMBC Group overview

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

• This is a hybrid role, requiring the successful candidate to attend our Tralee office at least three (3) days in a work week.

Role Description

SMBC is seeking a Information Security Audit & Regulatory Specialist to join our Information Security team in Tralee.

This role will coordinate and manage information security audit and regulatory engagements, working closely with auditors, control owners and subject matter experts to ensure requests are clearly understood, appropriately evidenced and delivered on time.

This is not an Internal Auditor position. It is an opportunity for someone with experience in IT audit, technology risk, assurance or cyber security governance to move into a role managing audit and regulatory engagement from within Information Security.

Role Objectives: Delivery

• Coordinate information security audits and regulatory engagements from initial request through to remediation and closure.
• Manage audit requests, evidence submissions and associated deadlines across multiple engagements.
• Review and challenge evidence to ensure appropriate documentation and artefacts are provided.
• Work closely with auditors, control owners and subject matter experts to clarify audit requirements and facilitate responses.
• Translate audit requests into clear requirements for evidence providers.
• Engage with auditors on information security controls and supporting evidence, working with control owners and subject matter experts to address queries.
• Review preliminary audit findings and work with relevant stakeholders to validate their accuracy and completeness.
• Track audit findings and remediation actions against agreed milestones through to closure.