SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.
In the Americas, SMBC Group has a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.
Role DescriptionA Vulnerability and Patch Management Project Manager is responsible for overseeing and managing a cross functional Vulnerability and Patch Management program across the Americas Division. The Project Manager will enable vulnerability response and patching governance to validate all vulnerabilities are acknowledged and governed through the process, documented, and remediated in accordance with the policies and adhere to the defined service level agreements. The Project Manager is also responsible for monitoring and reporting on the technology patch compliance and providing accurate metrics to senior management. The Project Manager is responsible for validating all activities for vulnerability and patching are auditable by diligently working with all technology asset owner across the Americas Division to verify policies, standards, procedures, and controls are in place to meet SMBC’s regulatory, operational, audit and reporting requirements.
Role Objectives• Contribute to planning, execution and implementation of a multi-year Vulnerability and Patch program through all phases, tasks and timelines.
• Manages the ServiceNow Security Operations module from a governance and compliance standpoint.
• Manages clients/stakeholders across the Americas Division for all technology vulnerabilities and patching; determines needs, facilitates communication, and implements changes, where applicable.
• Analyze vulnerability data and govern the assignments to the appropriate technology teams.
• Analyze the defined Service Level Agreements and report on compliance and violation of these to senior management.
• Create accurate metrics such as KPIs and KRIs for all technology vulnerabilities detected, remediated, and not remediated.
• Resolves or assists in the resolution of conflicts within and between projects or functional areas; implements changes where applicable.
• Oversee the documentation maintenance process, ensuring accurate and up-to-date operational procedures.
• Analyze vulnerability data and provide recommendations for remediation, automation, mitigation, and/or acceptance based on the risk profile.
Manage end-to-end delivery against a defined program. Define program stakeholders, scope, timing, resource requirements and deliverables. Implement standardized templates and communication channels to drive transparency and consistency across program effort. Create program management office (PMO) and assign clear roles and responsibilities to establish ownership of program work-streams and deliverables. Identify and mobilize subject matter experts throughout the organization to contribute as required. Monitor delivery throughout the life of the program and assess outcomes to ensure completeness and sustainability. Modify program plan and/or timelines as necessary in coordination with business stakeholders. Continuously monitor adherence to program budget and address areas of potential overrun. Secure additional funding for program if required and available.
Form strong partnerships with business stakeholders to agree and refine program scope, timelines and target deliverables. Promote coordination between program work-streams to ensure alignment and awareness of over-arching program objectives. Partner with impacted process owners to inform program delivery and objectives. Share expected outcomes and impact assessments to encourage buy-in on target end state. Cultivate and maintain internal network of subject matter experts to advise on questions and contribute to program delivery as required. Align with program management teams in other regions or business verticals to share best practice and collaborate on cross-divisional or cross-regional initiatives as appropriate.
Demonstrate a strong awareness of business stakeholder requirements and organizational context through delivery of complete, timely and sustainable program outcomes. Leverage excellent organizational skills to establish and manage well-structured program teams with clear roles and responsibilities. Employ communication skills to articulate a clear vision of program deliverables and encourage buy-in across all stakeholder groups, including business leadership, process owners and infrastructure partners. Continuously solicit feedback and insights from stakeholders and subject matter experts to inform improvements to program plans. Engage Six Sigma, lean and/or agile techniques as appropriate.
Qualifications and Skills• Knowledge of security frameworks such as FFIEC, NIST, and CIS.
• Excellent communication and interpersonal skills with the ability to communicate complex issues to technical and non-technical stakeholders.
• Excellent analytical and data handling skills producing accurate metrics.
• Proficient working with Jira/Confluence, including some experience with configuration.
• Working knowledge of system development lifecycle (SDLC) and process change/improvement
• Strong facilitator who can lead groups session and is equally comfortable in a collaboration role with business and technical resources at all levels, including senior management.
• Broad working knowledge of Agile frameworks is preferred: Scrum, Kanban, Lean, XP, and other advanced Agile frameworks (SAFe, DAD, etc.)
• Prior experience working within the financial services industry preferred.
• Prior experience working with ServiceNow Security Operations preferred.
• Certification in a related project management process (PMI-PMP or PRINCE2) preferred.
• Tools: Proficiency ServiceNow SPM is preferred
Software Systems / Programming Languages: MS Office, MS Visio, MS Project, Enterprise Resource Management tools, CMMI/ITIL/COBIT is preferred.
D&I Commitment
Responsible for fostering a culture of diversity and inclusion, holding leaders accountable for creating an inclusive environment through awareness and practice of equity in recruiting, developing, and promoting diverse talent.
SMBC’s employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.
We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SMBC provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.