SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

This is a hybrid role, requiring the successful candidate to attend our Tralee office at least three (3) days in a work week.

Role Description

SMBC is seeking a Information Security Audit & Regulatory Specialist to join our Information Security team in Tralee.

This role will coordinate and manage information security audit and regulatory engagements, working closely with auditors, control owners and subject matter experts to ensure requests are clearly understood, appropriately evidenced and delivered on time.

This is not an Internal Auditor position. It is an opportunity for someone with experience in IT audit, technology risk, assurance or cyber security governance to move into a role managing audit and regulatory engagement from within Information Security.

Role Objectives: Delivery

Coordinate information security audits and regulatory engagements from initial request through to remediation and closure.
Manage audit requests, evidence submissions and associated deadlines across multiple engagements.
Review and challenge evidence to ensure appropriate documentation and artefacts are provided.
Work closely with auditors, control owners and subject matter experts to clarify audit requirements and facilitate responses.
Translate audit requests into clear requirements for evidence providers.
Engage with auditors on information security controls and supporting evidence, working with control owners and subject matter experts to address queries.
Review preliminary audit findings and work with relevant stakeholders to validate their accuracy and completeness.
Track audit findings and remediation actions against agreed milestones through to closure.
Support the preparation and review of issue closure documentation.
Maintain audit evidence repositories, helping identify evidence that can be leveraged across similar requests.
Maintain accurate audit status information, dashboards and management reporting.
Provide guidance and support to other ARM team members as required.
Contribute to continuous improvement of ARM processes, standards, documentation and tools.
Support the development and delivery of training on ARM processes and tools across Information Security.

Qualifications and Skills

Bachelor's degree in Information Technology, Information Security or a related discipline, or equivalent relevant experience.
3+ years' experience in IT audit, technology risk, assurance, cyber security governance or a related area.
Good understanding of IT General Controls, information security controls, technology risk and the audit lifecycle.
Experience supporting or coordinating audits, assessments or regulatory engagements within a large or regulated organisation.
Knowledge of relevant information security and regulatory frameworks such as ISO 27001/27002, NIST and GDPR.
Professional certification such as CISA, CISM, CRISC or CISSP is advantageous but not essential.
Strong written and verbal communication skills with the ability to work effectively with auditors, technical teams and senior stakeholders.
Strong organisational and analytical skills with excellent attention to detail.
Ability to manage multiple priorities, take ownership of deliverables and work independently.
A collaborative approach with an interest in improving processes and developing within information security risk and assurance.

Additional Requirements

SMBC’s employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.

SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.

Information Security Audit & Regulatory Specialist

Job Description