SMBC Group Overview
As a top-tier global financial group, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. With a 400-year history and more than 130 offices worldwide in nearly 40 countries, the Group has over 80,000 employees globally.
The Group is led by Sumitomo Mitsui Financial Group, Inc. (SMFG), which is one of the three largest banking groups in Japan. SMFG's shares are traded on the Tokyo, Nagoya, and New York stock exchanges.
Role Description
This role requires a Vulnerability and Patch Management Project Manager to oversee and manage a cross-functional program across the Americas Division. The Project Manager will enable vulnerability response and patching governance, validate all vulnerabilities, document them, and remediate them according to policies and service level agreements.
The Project Manager is responsible for monitoring and reporting on technology patch compliance and providing accurate metrics to senior management. Additionally, they must ensure that all activities related to vulnerability and patching are auditable by working with technology asset owners across the Americas Division to verify policies, standards, procedures, and controls meet SMBC's regulatory, operational, audit, and reporting requirements.
Role Objectives
1. Contribute to planning, execution, and implementation of a multi-year Vulnerability and Patch program through all phases, tasks, and timelines.
2. Manage the ServiceNow Security Operations module from a governance and compliance standpoint.
3. Manage clients/stakeholders across the Americas Division for all technology vulnerabilities and patching; determine needs, facilitate communication, and implement changes where applicable.
4. Analyze vulnerability data and govern assignments to the appropriate technology teams.
5. Analyze defined Service Level Agreements and report on compliance and violations to senior management.
6. Create accurate metrics such as KPIs and KRIs for all technology vulnerabilities detected, remediated, and not remediated.
7. Resolve or assist in resolving conflicts within and between projects or functional areas; implement changes where applicable.
8. Oversee documentation maintenance process, ensuring accurate and up-to-date operational procedures.
9. Analyze vulnerability data and provide recommendations for remediation, automation, mitigation, and/or acceptance based on risk profile.
The ideal candidate will manage end-to-end delivery against a defined program, define program stakeholders, scope, timing, resource requirements, and deliverables. They will also implement standardized templates and communication channels to drive transparency and consistency across the program effort.
This includes creating a program management office (PMO) and assigning clear roles and responsibilities to establish ownership of program work-streams and deliverables. The candidate should identify and mobilize subject matter experts throughout the organization to contribute as required.
They will monitor delivery throughout the life of the program, assess outcomes to ensure completeness and sustainability, modify program plans and/or timelines as necessary in coordination with business stakeholders, and continuously monitor adherence to program budget and address areas of potential overrun.
The successful candidate will demonstrate a strong awareness of business stakeholder requirements and organizational context through delivery of complete, timely, and sustainable program outcomes. They will leverage excellent organizational skills to establish and manage well-structured program teams with clear roles and responsibilities.
They will employ communication skills to articulate a clear vision of program deliverables and encourage buy-in across all stakeholder groups, including business leadership, process owners, and infrastructure partners. The candidate will continuously solicit feedback and insights from stakeholders and subject matter experts to inform improvements to program plans.
Strong facilitation skills are essential, with the ability to lead group sessions and collaborate with business and technical resources at all levels, including senior management. Experience working within the financial services industry and with ServiceNow Security Operations is preferred. Certification in a related project management process (PMI-PMP or PRINCE2) is also desirable.
Qualifications and Skills
1. Knowledge of security frameworks such as FFIEC, NIST, and CIS.
2. Excellent communication and interpersonal skills with the ability to communicate complex issues to technical and non-technical stakeholders.
3. Excellent analytical and data handling skills producing accurate metrics.
4. Proficient working with Jira/Confluence, including some experience with configuration.
5. Working knowledge of system development lifecycle (SDLC) and process change/improvement.
6. Strong facilitator who can lead group sessions and is equally comfortable in a collaboration role with business and technical resources at all levels, including senior management.
7. Broad working knowledge of Agile frameworks is preferred: Scrum, Kanban, Lean, XP, and other advanced Agile frameworks (SAFe, DAD, etc.)
8. Prior experience working within the financial services industry preferred.
9. Prior experience working with ServiceNow Security Operations preferred.
10. Certification in a related project management process (PMI-PMP or PRINCE2) preferred.
11. Tools: Proficiency in ServiceNow SPM is preferred.
12. Software Systems / Programming Languages: MS Office, MS Visio, MS Project, Enterprise Resource Management tools, CMMI/ITIL/COBIT is preferred.
Additional Requirements
Diversity, Equity, and Inclusion Commitment
Responsible for fostering a culture of diversity and inclusion, holding leaders accountable for creating an inclusive environment through awareness and practice of equity in recruiting, developing, and promoting diverse talent.
SMBC employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process.
We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status, or any other characteristic protected by law. SMBC provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application process, please let us know.