Executive Director, Cyber, Data & Tech Controls Testing

SMBC Group; Charlotte, Northern (NC, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

SMBC Group in Charlotte, NC seeks an Executive Director, Head of Tech Cyber Data First Line Testing to lead the IT, Data and Cyber Controls Testing program. You’ll oversee cross-functional teams, design monitoring routines, and drive remediation across cybersecurity, data management and technology controls.

The role requires 10+ years in risk, strong communication, and experience with NYDFS, NIST, ISO 27001 and related frameworks in financial services.

Qualifications

• 10+ years in Audit/Operational Risk with control testing knowledge.
• Detail oriented with ability to apply risk management principles.
• Document control testing findings and trend analysis.
• Expertise in control frameworks and monitoring programs.
• Process design, mapping, and reengineering skills.
• Strong communication and time management abilities.
• Self-starter who can manage multiple projects and deadlines.
• Experience with senior management interactions and regulatory requirements.
• Knowledge of NYDFS 500 and standards like NIST, ISO 27001, COBIT.

Responsibilities

• Lead planning and execution of risk-based control testing across domains.
• Develop monitoring routines with documentation and analysis.
• Assess control effectiveness and recommend enhancements.
• Prepare workpapers and monitoring reports within timeframes.
• Communicate requirements and results to stakeholders and drive remediation.
• Oversee deep dives to identify weaknesses and inefficiencies.
• Ensure adherence to regulatory and internal control standards.

Skills

Audit & Risk

Control Testing

Cybersecurity

Data Management

Tech Risk

Regulatory Knowledge

Communication

Prioritization

Job description

SMBC Group in Charlotte, NC seeks an Executive Director, Head of Tech Cyber Data First Line Testing to lead the IT, Data and Cyber Controls Testing program. You’ll oversee cross-functional teams, design monitoring routines, and drive remediation across cybersecurity, data management and technology controls.

The role requires 10+ years in risk, strong communication, and experience with NYDFS, NIST, ISO 27001 and related frameworks in financial services.