VP, Cyber Controls & Governance

SMBC; Charlotte (NC); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC is seeking a Vice President, Cyber Controls Manager to lead the Cyber Controls & Regulatory Frameworks function. You will design, govern, and measure cybersecurity controls and strengthen regulatory alignment. You will manage a direct report and coordinate contractors to support a mature program.

You will partner with Cyber, Technology, Internal Audit, Risk, and Compliance to drive improvements, standardization, and automation across control operations.

Qualifications

• 6+ years of cybersecurity governance or related experience in financial services.
• Experience designing, assessing, mapping, and governing cybersecurity controls.
• Knowledge of NIST CSF, CRI, NYDFS Part 500, FFIEC guidance, and US banking expectations.

Responsibilities

• Own the Cyber Controls Library including objectives, ownership, taxonomy, and retirement.
• Maintain mappings across cyber controls, NIST CSF, CRI, regulatory requirements, and internal policies.
• Identify coverage gaps and prepare the program for regulatory reviews.
• Lead key-control analysis and rationalization.
• Apply risk-based criteria to key-control designations and strengthen coverage.
• Define key control indicators, data requirements, and reporting with owners.
• Design and improve controls addressing cyber risks, audit findings, and gaps.
• Develop metrics, dashboards, and executive reporting on control health.

Skills

Cyber governance

Technology risk

Cyber audit

Controls assurance

First-line controls

Operational risk

Leadership

Stakeholder management

Education

Bachelor's degree or equivalent

CISA certification

CISSP certification

CISM certification

CRISC certification

Job description

SMBC is seeking a Vice President, Cyber Controls Manager to lead the Cyber Controls & Regulatory Frameworks function. You will design, govern, and measure cybersecurity controls and strengthen regulatory alignment. You will manage a direct report and coordinate contractors to support a mature program.

You will partner with Cyber, Technology, Internal Audit, Risk, and Compliance to drive improvements, standardization, and automation across control operations.