VP, Cyber Controls & Governance Lead (Hybrid)

Sumitomo Mitsui Financial Group, Inc.; New York (NY); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

SMBC Group is seeking a Vice President, Cyber Controls Manager to lead the Cyber Controls & Regulatory Frameworks function. You will design, govern, measure, and maintain cybersecurity controls, combining hands-on expertise with team leadership to mature the program and improve regulatory alignment.

Reporting to the Head of Cyber Governance, you will manage one direct report and coordinate with Cyber, Technology, Internal Audit, Risk, Compliance, and control owners to drive governance

Qualifications

• Experience designing, assessing, mapping, or governing cybersecurity or technology controls.
• Strong ability to translate regulatory requirements into clear actions and reporting.
• Experience working with Internal Audit, Risk, Compliance, and senior leaders.

Responsibilities

• Own the Cyber Controls Library, including objectives, descriptions, ownership, applicability, taxonomy, and governance.
• Maintain traceable mappings across cyber controls, the NIST CSF, CRI, and regulatory requirements.
• Lead key-control analysis, rationalization, and coverage improvements.
• Develop metrics, dashboards, and executive reporting on control health and trends.
• Partner with Cyber, Technology, Internal Audit, Risk, Compliance, and control owners on inquiries and remediation actions.

Skills

Cyber governance

Controls management

Leadership

Regulatory reporting

Stakeholder communication

Analytical skills

Education

Bachelor’s degree

Tools

SAI360

ServiceNow

Archer

CISA

CISSP

CISM

CRISC

Job description

SMBC Group is seeking a Vice President, Cyber Controls Manager to lead the Cyber Controls & Regulatory Frameworks function. You will design, govern, measure, and maintain cybersecurity controls, combining hands-on expertise with team leadership to mature the program and improve regulatory alignment.

Reporting to the Head of Cyber Governance, you will manage one direct report and coordinate with Cyber, Technology, Internal Audit, Risk, Compliance, and control owners to drive governance