Cyber GRC Engineering & Automation

SMBC Group; Charlotte (NC); Hybrid; USD 190,000 - 270,000; Full time

Job summary

SMBC Group seeks a Vice President, GRC Engineering & Automation within its Information Security organization. This role will engineer, automate, and operate Cyber GRC platforms, ensuring scalable data, dashboards, and workflows while maintaining strong governance and data quality across Makoto, ServiceNow, and Power BI.

You will partner with Cyber GRC, Technology, Risk, and Compliance teams to translate business needs into reliable platform solutions, lead a team of engineers and analysts, and

Qualifications

• Experience with GRC platforms and automation.
• Hands-on with SQL and programming languages (Java, JavaScript, Python, PowerShell).
• Advanced Power BI and data modeling skills.
• Strong governance, risk, controls and compliance knowledge.
• Excellent written and verbal communication skills.

Responsibilities

• Lead Cyber GRC engineering, automation, and governance technology capabilities.
• Act as Cyber GRC business owner for Makoto (SAI360) platform and align with governance processes.
• Define and maintain Cyber GRC workflows, dashboards, and reporting requirements.
• Drive platform enhancements, testing, deployments, and backlog prioritization.
• Design and implement workflow automation, integrations, and technical solutions.
• Collaborate with Technology, Risk, Compliance, Audit, and Operations teams to translate requirements into solutions.

Skills

SQL

Java

JavaScript

Python

PowerShell

APIs

Power BI

Data Modeling

GRC Platforms

Stakeholder comms

Education

Bachelor's degree in Information Systems/CS/Cybersecurity/Engineering

Tools

Makoto (SAI360)

ServiceNow

Archer

MetricStream

Job description

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

Job Summary

SMBC is seeking a Vice President, GRC Engineering & Automation within the Information Security organization. This role is responsible for the engineering, administration, automation, and ongoing evolution of Cyber Governance, Risk, and Compliance (GRC) platforms, workflows, reporting, and data. The position serves as the primary Cyber point-of-contact for the Makoto (SAI360) GRC platform and is responsible for ensuring its Cyber GRC workflows are efficient, scalable, measurable, and supported by reliable data and automation. The Vice President will partner closely with stakeholders in Cyber GRC, Technology, Risk Management, the Business Controls Office, and the Makoto delivery team to transform GRC requirements into sustainable workflows, integrations, dashboards, and monitoring capabilities. The role maintains a solid reporting line within Cyber Governance and works closely with Technology partners supporting the broader enterprise GRC platform. Success in this role requires an individual who can operate comfortably between governance, technology, and data disciplines, translating business requirements into practical platform solutions while maintaining strong governance and control over data quality, workflows, and automation.

PRINCIPAL DUTIES & RESPONSBILITIES

• Serve as the operational leader for Cyber GRC engineering, automation, and governance technology capabilities.
• Act as the Cyber GRC business owner and primary point of contact for the Makoto (SAI360) platform, ensuring alignment with Cyber Governance processes, objectives, and strategic priorities.
• Define and maintain Cyber GRC workflows, forms, business rules, dashboards, reporting requirements, and automation capabilities supporting policies, standards, controls, assessments, issues, regulatory obligations, and other governance processes.
• Lead platform enhancements, releases, testing activities, production deployments, and backlog prioritization to ensure Cyber GRC platforms remain effective, scalable, and aligned with business needs.
• Design, develop, and implement workflow automation, system integrations, and technical solutions that improve efficiency, reduce manual effort, and enhance governance process effectiveness.
• Partner closely with Technology, Risk Management, Compliance, Audit, Operations, and Cyber Governance stakeholders to translate business requirements into sustainable technical solutions.
• Maintain alignment and integration across Makoto, ServiceNow, Power BI, Databricks, and other governance-related platforms, ensuring consistent workflows, reporting, and data management practices.
• Partner with the Cyber Risk Treatment team to support integration of risk and issue management processes with broader Cyber GRC workflows, reporting, and automation capabilities.
• Evaluate and implement opportunities for responsible use of artificial intelligence, automation, and advanced analytics within Cyber GRC processes while ensuring appropriate governance and oversight.
• Establish and maintain controls, monitoring, and reporting capabilities to support data quality, process integrity, auditability, and regulatory expectations.
• Manage and develop a team of engineers, analysts, and consulting resources while fostering a culture of continuous improvement, technical innovation, automation, and data-driven decision-making.
• Provide strategic and technical leadership for Cyber GRC platforms, data architecture, reporting, and automation capabilities, helping shape the long-term governance technology roadmap.

Required Qualifications

• Bachelor's degree in Information Systems, Computer Science, Cybersecurity, Engineering, or a related field.
• 6+ years of experience supporting GRC platforms, governance technology, workflow automation, data engineering, or related disciplines.
• Experience administering or supporting enterprise GRC platforms (e.g., SAI360, ServiceNow, Archer, MetricStream, comparable platforms)
• Hands-on proficiency with SQL and modern programming/scripting languages (e.g., Java, JavaScript, Python, PowerShell), including the ability to design, develop, troubleshoot, and implement workflow automation, integrations, reporting solutions, and platform enhancements.
• Experience working with web application technologies and platform configuration frameworks, including JavaScript, JSON, APIs, and related technologies.
• Advanced proficiency with Microsoft Power BI and related data technologies, including data modeling, DAX, Power Query, dashboard development, and integration of multiple data sources to build and maintain governance, risk, compliance, and operational reporting solutions.
• Experience gathering and translating business requirements into technical solutions.
• Experience managing platform backlogs, releases, testing, and stakeholder requirements.
• Strong understanding of governance, risk, control, and compliance concepts.
• Strong written and verbal communication skills.

NICE TO HAVE

• Experience with SAI360 / Makoto.
• Experience supporting Continuous Controls Monitoring programs.
• Experience with Databricks, Power BI, SQL, and ServiceNow.
• Experience supporting risk registers, issue management, or regulatory-management workflows.
• Familiarity with cyber governance frameworks, including CRI Profile, FFIEC, NIST CSF, NIST SP 800-53, ISO 27001, NYDFS Part 500
• Experience working in financial services.
• Certifications such as Microsoft Power BI Data Analyst Associate (PL-300), Microsoft Fabric Analytics Engineer Associate (DP-600), ServiceNow Certified System Administrator (CSA) or Certified Application Developer (CAD), Databricks Certified Data Engineer Associate, CISSP, CRISC, CISA, or equivalent cybersecurity/governance certification

SMBC’s employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.

SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at [e-mail].