Head of Information Security Risk Management

2 weeks ago


New York, New York, United States Sumitomo Mitsui Financial Group, Inc. Full time

Sumitomo Mitsui Financial Group, Inc. (SMFG) stands as a premier global financial institution, with its roots tracing back over 400 years. Headquartered in Tokyo, SMFG provides a comprehensive suite of financial services, encompassing banking, leasing, securities, credit cards, and consumer finance. With a workforce exceeding 80,000 across more than 130 offices in nearly 40 countries, SMFG is recognized as one of Japan's leading banking groups, with shares listed on the Tokyo, Nagoya, and New York stock exchanges.

In the Americas, SMFG operates in various countries including the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru, leveraging its robust capital base and extensive relationships in Asia to deliver a wide array of commercial and investment banking services to corporate, institutional, and municipal clients. The Group's operating entities in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., and several others.

Position Overview

The Information Security Functional Control Officer (FCO) serves as a vital change agent and risk management contributor within the Information Security Functional Unit. This role is pivotal in guiding the design of processes and controls, ensuring a thorough assessment of risks throughout the transaction lifecycle, and facilitating interactions with second-line defense functions, including Risk Management and Compliance.

Key Responsibilities

The FCO's responsibilities include:

  • Providing expert guidance on process and control assessments across the transaction lifecycle, proactively identifying threats and vulnerabilities.
  • Enhancing efficiency and strengthening controls through process re-engineering within the Information Security Function.
  • Coordinating interactions with second-line defense functions and the Audit & Regulatory Management team regarding processes and controls.
  • Managing risk appetite, limits, guidelines, and issue management for the Information Security Function.
  • Supporting the risk management framework and conducting related risk assessments.
  • Assisting the first line of defense with issue management and root cause analysis.
  • Facilitating collaboration between Information Security and control functions for risk assessments.
  • Partnering with the Regulatory Change Management team to ensure compliance with applicable laws and regulations.
  • Offering subject matter expertise in the implementation of Information Security programs.
  • Evaluating key metrics to ensure operational effectiveness within Information Security.
  • Embedding risk management considerations into daily processes and business strategies, while identifying and reporting emerging risks.
  • Producing management reports and presenting critical items to management committees.

Qualifications

To be successful in this role, candidates should possess:
  • Experience: 5 to 7 years in specialized roles within Financial Services; 7 to 10 years in Information Security or related fields at a major global financial institution.
  • Education: BA / BS required; MA / MS / MBA in relevant disciplines preferred.
  • Certifications: CISA, CISSP, CRISC are preferred.
  • Language Proficiency: Business fluency in English.
  • Technical Skills: Proficiency in Excel, PowerPoint, and Visio; knowledge of Microsoft Power BI and GRC Solutions is advantageous.
  • Travel Requirements: Minimal travel (0-10%).

Work Environment

SMFG's culture is guided by its core values: Customer First, Proactive/Innovative, Speed, Quality, and Team SMBC. The role is conducted in a secure office environment, utilizing standard office equipment. Candidates should be prepared for potential long hours and occasional weekend work, depending on job duties and team priorities.

Diversity and Inclusion Commitment

SMFG is dedicated to fostering a culture of diversity and inclusion, holding leaders accountable for creating an equitable environment in recruiting, developing, and promoting diverse talent. Employees participate in a hybrid workforce model, allowing for a combination of remote and office work, with specific schedules discussed during the interview process.

  • New York, New York, United States Pagaya Technologies Ltd. Full time

    Head of Business Information Securityat Pagaya Technologies Ltd.About Pagaya Technologies Ltd.Transforming the Financial LandscapePagaya Technologies Ltd. is a pioneering financial technology firm dedicated to revolutionizing the lending ecosystem for investors through advanced machine learning, extensive data analytics, and sophisticated AI-driven risk...


  • New York, New York, United States Rockstar Games Full time

    At Rockstar Games, we are dedicated to crafting exceptional entertainment experiences. We are in search of a seasoned and strategic leader in Information Security Governance, Risk, and Compliance (GRC) who will take charge of assembling and guiding a team of security professionals to implement essential, strategic initiatives that effectively minimize risk...

  • Security Officer

    4 days ago


    New York, New York, United States Allied Risk Management Full time

    Job SummaryWe are seeking a highly skilled and experienced Security Officer to join our team at Allied Risk Management. As a Security Officer, you will be responsible for ensuring the safety and security of our clients and their properties.Key ResponsibilitiesIncident Response: Respond to all incidents and conduct preliminary investigations to ensure a...


  • New York, New York, United States Rockstar Full time

    About Rockstar GamesAt Rockstar Games, we are dedicated to crafting exceptional entertainment experiences.A career with us means joining a team that works on some of the most creatively fulfilling and ambitious projects in the entertainment industry. You will be embraced by a supportive and inclusive environment where you can grow and collaborate with some...


  • New York, New York, United States Faire Inc Full time

    About Faire Inc.Faire Inc. is a leading online wholesale marketplace that empowers independent retailers to succeed in a rapidly changing retail landscape. Our mission is to level the playing field for small businesses by providing them with access to a global network of suppliers and customers. At Faire, we believe that the future of retail is local, and...


  • New York, New York, United States Crédit Agricole S.A. Full time

    Job DescriptionJob Title: Head of Vulnerability Management and Security Operations, AmericasJob Summary:The Head of Vulnerability Management and Security Operations reports to the Chief Information Security Officer and is responsible for managing senior and junior IT Security engineers in security monitoring, remediating all security-related alerts &...


  • New York, New York, United States Security Management Resources Inc Full time

    Job SummaryWe are seeking a highly experienced and skilled Senior Director, Global Security and Risk Management to join our team at Security Management Resources Inc. As a key member of our leadership team, you will be responsible for developing and implementing comprehensive security strategies to safeguard our assets and employees worldwide.Key...


  • New York, New York, United States eJangar Full time

    Position: Information Security Risk Management SpecialistExperience Required: Minimum of 4+ years in ITEssential Skills:• 4+ years of experience as a Cybersecurity/Risk Analyst, focusing on information risk evaluation and data privacy impact assessments.• 2+ years of proficiency with Resource Access Control Facility (RACF).• 2+ years of hands-on...


  • New York, New York, United States Synergy Interactive Full time

    Position Overview:As the Head of Operational Risk Management, you will play a pivotal role in steering risk-related initiatives across Synergy Interactive's diverse portfolio of products and projects.Key Responsibilities:Lead comprehensive Risk Assessments, including Risk and Control Self-Assessments (RCSA), Top Risk Assessments, Project Risk Assessments,...


  • New York, New York, United States Synergy Interactive Full time

    Position Overview:As the Head of Operational Risk Management, you will play a pivotal role in steering risk initiatives across Synergy Interactive's diverse portfolio of products and projects.Key Responsibilities:Lead comprehensive Risk Assessments, including Risk and Control Self-Assessments (RCSA), Top Risk Assessments, Project Risk Assessments, and New...


  • New York, New York, United States JPC Partners Full time

    JPC Partners is seeking a Head of Enterprise Security who will collaborate closely with executive leadership, security professionals, and other essential stakeholders. This role is pivotal in crafting and executing a robust information security strategy and program aimed at enhancing the organization's security posture. The successful candidate will...


  • New York, New York, United States JPC Partners Full time

    JPC Partners is seeking a Head of Enterprise Security to collaborate closely with executive leadership, security experts, and essential stakeholders. This pivotal role is responsible for crafting and executing a comprehensive information security strategy and program aimed at enhancing the organization's security posture. The individual will spearhead the...


  • New York, New York, United States PJT Partners Full time

    PJT Partners is a premier advisory-focused investment banking firm. Our team of seasoned professionals provides a comprehensive range of strategic advisory services, including shareholder advisory, restructuring, special situations, and private fund advisory and placement services to corporations, financial sponsors, institutional investors, and governments...


  • New York, New York, United States Social Capital Resources Full time

    Social Capital Resources is in search of a Chief Risk OfficerKEY RESPONSIBILITIES:Lead the development and execution of strategic and tactical initiatives related to legal and risk management.Supervise and manage the Risk Management, Compliance, Bank Secrecy Act, Vendor Oversight, and Security divisions, ensuring comprehensive management...


  • New York, New York, United States TD Bank Group Full time

    Job Description**Job Summary:**We are seeking a highly skilled and experienced professional to lead our Insider Risk Management program. As the Head of Insider Risk Management, you will be responsible for overseeing the prevention, detection, and investigation of internal threats to our organization.Key Responsibilities:Develop and Implement Insider Risk...

  • Security Professionals

    20 hours ago


    New York, New York, United States Allied Risk Management Full time

    About the JobWe are seeking highly skilled and experienced Security Professionals to join our team at Allied Risk Management. As a Security Guard, you will play a critical role in maintaining the safety and security of our clients' premises.Key ResponsibilitiesMonitor and authorize entrance and departure of employees, visitors, and other persons to prevent...


  • New York, New York, United States InvestM Technology LLC Full time

    Job DescriptionJob Title: Security Risk Management SpecialistCompany: InvestM Technology LLCJob Type: Full-timeLocation: RemoteJob Category: Information TechnologyAbout Us: InvestM Technology LLC is a leading provider of innovative technology solutions. We are seeking a highly skilled Security Risk Management Specialist to join our team.Key...


  • New York, New York, United States FalconX Full time

    About FalconXFalconX is a leading digital asset platform for institutions, providing trade execution, credit & treasury management, prime offering, and market making services. With a global presence and industry-leading technology, we have facilitated client transactions of $1 trillion in volume. Our products and services are regulated, compliant, and...


  • New York, New York, United States JPC Partners Full time

    JPC Partners is seeking a Head of Enterprise Security Operations to collaborate closely with executive management, security experts, and essential stakeholders. This role is pivotal in formulating and executing a holistic information security strategy and program aimed at enhancing the organization’s security posture. The successful candidate will...


  • New York, New York, United States Standard Chartered Full time

    About the RoleWe are seeking a highly experienced and skilled professional to lead our Conduct and Risk Management function in the Americas region. As the Head of Conduct and Risk Management, you will be responsible for ensuring that our business operations are conducted in a manner that is compliant with regulatory requirements and that our risk management...