VP, Security Governance
VP, Security Governance
SMBC Group- Posted 3 hours ago
- Be among the first 10 applicants
Job Description
Job Responsibilities
- Governance and Controls Management
- Develop, maintain, and enhance comprehensive security governance standards, policies, procedures, and guidelines aligned with corporate policies, regulatory mandates, and industry-leading frameworks.
- Monitor adherence to cybersecurity controls and governance practices across all business units.
- Partner with business units and IT teams to assess, refine, and standardize cyber risk and information security management processes to ensure consistency and operational excellence.
- Identify process/capabilities gaps and inefficiencies within IT and IS frameworks; recommend and implement pragmatic improvements to enhance security posture and risk management.
- Act as a trusted advisor and consultant to stakeholders on security governance matters, ensuring IT projects and initiatives incorporate appropriate risk mitigation and compliance controls.
- Provide security governance and strategic oversight for Post-Quantum Cryptography (PQC) initiative, establish the relevant security framework and standards, and drive the bank's transition towards long-term cryptographic resilience.
- Conduct security risk assessments for third-party engagements to strengthen the bank's security posture and resilience across its third-party ecosystem.
- Audit Support
- Oversee cybersecurity audits, assurance activities, and regulatory engagements; manage responses to audit findings and regulatory inquiries with thorough documentation and knowledge management.
- Coordinate and support internal audit activities related to security controls across the enterprise and its franchises.
- Prepare and manage audit documentation, respond to audit findings, and track remediation plans to closure.
- Stakeholder Collaboration
- Collaborate with the wider Cybersecurity, Risk Management, IT Operations, Legal, and Compliance teams to integrate governance and controls across technology initiatives.
- Engage with franchise leadership to support governance initiatives and foster strong communication channels.
- Bachelor's degree in information technology, Cybersecurity, or a related field.
- Minimum 12 years of professional experience with at least 8 years focused on cyber risk management and information security governance, preferably in a financial institution.
- Deep expertise in risk management frameworks, IT governance, cybersecurity standards, and compliance requirements across multiple jurisdictions.
- Proven experience managing audits and regulatory compliance in technology, cybersecurity, and information security domains.
- Good knowledge across diverse IT and security domains, including but not limited to, Cryptographic Key Management, Third-Party Risk Management, and AI Risk Management.
- Exceptional interpersonal, analytical, and written communication skills with the ability to influence and engage stakeholders at all levels.
- Demonstrated problem-solving skills and ability to work effectively under pressure and tight deadlines.
- Self-motivated, meticulous, and a proactive team player with a positive attitude and strong sense of responsibility.
- Ability to manage multiple priorities in a fast-paced, evolving environment.
- Relevant professional certifications (e.g. CISSP, CISA, CRISC, CGEIT) and knowledge of CRI are highly desirable.
More Info
Key Skills
Compliance requirements
Risk management frameworks
Third-Party Risk Management
AI Risk Management
Cybersecurity standards
About Company
Skills:
Cryptographic Key Management, It Governance, cybersecurity standards, controls support, Third-Party Risk Management, Cisa, risk management frameworks, Regulatory Compliance, AI Risk Management, cyber governance, Cissp, security standards, audits, cgeit, CRISC, compliance requirements
Skills:
Advisory, SFA FAA MAS notices and guidelines, AML CFT requirements, digital financial services, SGX rules, Regulatory Compliance, Online Trading, fintech
Skills:
DevSecOps, IT security standards, Hybrid cloud, Risk assessments, Cybersecurity governance frameworks, Regulatory reviews, CI CD, Secure architecture, Cybersecurity audits, Regulatory Requirements, Risk management methodologies, Remediation programmes
Skills:
Information Security, ML Security, AI Security, Cybersecurity Risk, Adversarial Testing, Robustness Testing, AI Governance, Emerging Technology Risks, Privacy-Preserving Approaches, Risk Appetite Measures
Skills:
risk governance , Incident Management, Issue Management, Leadership, Risk Assessment, Operational Risk Management Frameworks, Stakeholder Management