VP, Cybersecurity Controls Testing & Monitoring

SMBC Group; Charlotte (NC); On-site; USD 180,000 - 260,000; Full time

Job summary

SMBC Group in Charlotte, NC seeks a VP of Cybersecurity, Data & Technology Controls Testing and Monitoring to lead the design, execution, and oversight of first-line control testing across cybersecurity, data management, and technology.

The role partners with Technology, Data and Cybersecurity stakeholders to identify gaps, drive remediation, and elevate the Information Security control environment, reporting to the Control Design and Monitoring function.

Qualifications

• 5+ years of Audit/Operational Risk/First Line Control Testing in financial services, with 3–5 years in Cybersecurity and Tech Risk.
• Hands-on experience testing design and operating effectiveness of technology controls and documenting findings.
• Expertise in control frameworks, assessment, and monitoring programs.
• Strong written and verbal communication and time management.
• Experience presenting to senior management.
• Strong analytical and organizational skills.
• Knowledge of NIST CSF, NIST 800-53, ISO 27001, COBIT, FFIEC and related banking controls.
• Certifications such as CISA, CISSP, CISM, CRISC, CIA are preferred.

Responsibilities

• Execute risk-based control testing across cybersecurity, data management and technology domains to ensure compliance with internal policies and applicable rules, laws, and regulations
• Perform Control Monitoring/ Testing routines with detailed documentation, walkthroughs, analysis and evaluation of the current processes
• Assess the effectiveness of the controls and make recommendations for enhancement and strengthening of the control environment
• Prepare detailed work-papers and Monitoring results reports summarizing scope, methodology, and significant conclusions of testing/ monitoring performed within prescribed time frames
• Clearly communicate the Program requirements and the results with stakeholders and drive remediation where needed
• Assist in the reporting and tracking of identified issues and corrective action plans to validate remediation efforts
• Perform deep dives of Cybersecurity, Data and Technology controls across all assets to identify areas of control weaknesses and process inefficiencies that may need enhancement
• Possesses solid background knowledge and understanding of Technology, Data Management, and Cyber Security standards, frameworks, policies and compliance regulations

Skills

Audit & risk management

Cybersecurity controls testing

Control monitoring

Communication skills

Stakeholder management

Regulatory frameworks knowledge

Job description

SMBC Group in Charlotte, NC seeks a VP of Cybersecurity, Data & Technology Controls Testing and Monitoring to lead the design, execution, and oversight of first-line control testing across cybersecurity, data management, and technology.

The role partners with Technology, Data and Cybersecurity stakeholders to identify gaps, drive remediation, and elevate the Information Security control environment, reporting to the Control Design and Monitoring function.