Cyber GRC Engineering & Automation

SMBC is seeking a Vice President, GRC Engineering & Automation within the Information Security organization.

This role is responsible for the engineering, administration, automation, and ongoing evolution of Cyber Governance, Risk, and Compliance (GRC) platforms, workflows, reporting, and data.

The position serves as the primary Cyber point-of-contact for the Makoto (SAI360) GRC platform and is responsible for ensuring its Cyber GRC workflows are efficient, scalable, measurable, and supported by reliable data and automation.

The Vice President will partner closely with stakeholders in Cyber GRC, Technology, Risk Management, the Business Controls Office, and the Makoto delivery team to transform GRC requirements into sustainable workflows, integrations, dashboards, and monitoring capabilities.

The role maintains a solid reporting line within Cyber Governance and works closely with Technology partners supporting the broader enterprise GRC platform.

Success in this role requires an individual who can operate comfortably between governance, technology, and data disciplines, translating business requirements into practical platform solutions while maintaining strong governance and control over data quality, workflows, and automation.

PRINCIPAL DUTIES & RESPONSBILITIES Serve as the operational leader for Cyber GRC engineering, automation, and governance technology capabilities.

Act as the Cyber GRC business owner and primary point of contact for the Makoto (SAI360) platform, ensuring alignment with Cyber Governance processes, objectives, and strategic priorities.

Define and maintain Cyber GRC workflows, forms, business rules, dashboards, reporting requirements, and automation capabilities supporting policies, standards, controls, assessments, issues, regulatory obligations, and other governance processes.

Lead platform enhancements, releases, testing activities, production deployments, and backlog prioritization to ensure Cyber GRC platforms remain effective, scalable, and aligned with business needs.

Design, develop, and implement workflow automation, system integrations, and technical solutions that improve efficiency, reduce manual effort, and enhance governance process effectiveness.

Partner closely with Technology, Risk Management, Compliance, Audit, Operations, and Cyber Governance stakeholders to translate business requirements into sustainable technical solutions.

Maintain alignment and integration across Makoto, ServiceNow, Power BI, Databricks, and other governance-related platforms, ensuring consistent workflows, reporting, and data management practices.

Partner with the Cyber Risk Treatment team to support integration of risk and issue management processes with broader Cyber GRC workflows, reporting, and automation capabilities.

Evaluate and implement opportunities for responsible use of artificial intelligence, automation, and advanced analytics within Cyber GRC processes while ensuring appropriate governance and oversight.

Establish and maintain controls, monitoring, and reporting capabilities to support data quality, process integrity, auditability, and regulatory expectations.

Manage and develop a team of engineers, analysts, and consulting resources while fostering a culture of continuous improvement, technical innovation, automation, and data-driven decision-making.

Provide strategic and technical leadership for Cyber GRC platforms, data architecture, reporting, and automation capabilities, helping shape the long-term governance technology roadmap.