Vulnerability and Patch Governance & Administration (Associate)
SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance.
Role Description
A Vulnerability and Patch Management Project Manager is responsible for overseeing and managing a cross-functional Vulnerability and Patch Management program across the Americas Division. The Project Manager will enable vulnerability response and patching governance to validate all vulnerabilities are acknowledged and governed through the process, documented, and remediated in accordance with the policies and adhere to the defined service level agreements.
Role Objectives
1. Contribute to planning, execution and implementation of a multi-year Vulnerability and Patch program through all phases, tasks and timelines.
2. Manage the ServiceNow Security Operations module from a governance and compliance standpoint.
3. Manage clients/stakeholders across the Americas Division for all technology vulnerabilities and patching; determine needs, facilitate communication, and implement changes where applicable.
4. Analyze vulnerability data and govern the assignments to the appropriate technology teams.
5. Analyze the defined Service Level Agreements and report on compliance and violation of these to senior management.
6. Create accurate metrics such as KPIs and KRIs for all technology vulnerabilities detected, remediated, and not remediated.
7. Resolve or assist in the resolution of conflicts within and between projects or functional areas; implement changes where applicable.
8. Oversee the documentation maintenance process, ensuring accurate and up-to-date operational procedures.
9. Analyze vulnerability data and provide recommendations for remediation, automation, mitigation, and/or acceptance based on the risk profile.
Manage end-to-end delivery against a defined program. Define program stakeholders, scope, timing, resource requirements and deliverables. Implement standardized templates and communication channels to drive transparency and consistency across program effort.
Qualifications and Skills
1. Knowledge of security frameworks such as FFIEC, NIST, and CIS.
2. Excellent communication and interpersonal skills with the ability to communicate complex issues to technical and non-technical stakeholders.
3. Excellent analytical and data handling skills producing accurate metrics.
4. Proficient working with Jira/Confluence, including some experience with configuration.
5. Working knowledge of system development lifecycle (SDLC) and process change/improvement.
6. Strong facilitator who can lead group sessions and is equally comfortable in a collaboration role with business and technical resources at all levels, including senior management.
7. Prior experience working within the financial services industry preferred.
8. Prior experience working with ServiceNow Security Operations preferred.
9. Certification in a related project management process (PMI-PMP or PRINCE2) preferred.
Additional Requirements
SMBC’s employees participate in a hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location.
#J-18808-Ljbffr