**About Us**
SMBC Group is a top-tier global financial group, with a 400-year history. We offer a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance.
We have over 130 offices and 80,000 employees worldwide in nearly 40 countries. Our shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.
In the Americas, we have a presence in the US, Canada, Ireland, Mexico, Brazil, Chile, Colombia, and Peru. Backed by our capital strength and Asian relationships, we offer commercial and investment banking services to our corporate, institutional, and municipal clients.
We connect our diverse client base to local markets and our extensive global network.
-----------------------------------
**Job Description**
A Vulnerability and Patch Management Project Manager is responsible for overseeing and managing a cross-functional program across the Americas Division.
The Project Manager will enable vulnerability response and patching governance to validate all vulnerabilities are acknowledged and governed through the process, documented, and remediated in accordance with policies and service level agreements.
The Project Manager monitors and reports on technology patch compliance and provides accurate metrics to senior management.
The Project Manager validates activities for vulnerability and patching are auditable by working with technology asset owners across the Americas Division to verify policies, standards, procedures, and controls meet SMBC's regulatory, operational, audit, and reporting requirements.
-----------------------------------
**Role Objectives**
1. Contribute to planning, execution, and implementation of a multi-year Vulnerability and Patch program through all phases, tasks, and timelines.
2. Manage the ServiceNow Security Operations module from a governance and compliance standpoint.
3. Manage clients/stakeholders across the Americas Division for all technology vulnerabilities and patching; determine needs, facilitate communication, and implement changes where applicable.
4. Analyze vulnerability data and govern assignments to the appropriate technology teams.
5. Analyze defined Service Level Agreements and report on compliance and violations to senior management.
6. Create accurate metrics such as KPIs and KRIs for all technology vulnerabilities detected, remediated, and not remediated.
7. Resolve or assist in conflicts within and between projects or functional areas; implement changes where applicable.
8. Oversee documentation maintenance process, ensuring accurate and up-to-date operational procedures.
9. Analyze vulnerability data and provide recommendations for remediation, automation, mitigation, and/or acceptance based on risk profile.
-----------------------------------
**Responsibilities**
Manage end-to-end delivery against a defined program.
Define program stakeholders, scope, timing, resource requirements, and deliverables.
Implement standardized templates and communication channels to drive transparency and consistency across program efforts.
Create a program management office (PMO) and assign clear roles and responsibilities to establish ownership of program work-streams and deliverables.
Identify and mobilize subject matter experts throughout the organization to contribute as required.
Monitor delivery throughout the life of the program and assess outcomes to ensure completeness and sustainability.
Modify program plan and/or timelines as necessary in coordination with business stakeholders.
Continuously monitor adherence to program budget and address areas of potential overrun.
Secure additional funding for the program if required and available.
-----------------------------------
**Partnerships and Coordination**
Form strong partnerships with business stakeholders to agree and refine program scope, timelines, and target deliverables.
Promote coordination between program work-streams to ensure alignment and awareness of overarching program objectives.
Partner with impacted process owners to inform program delivery and objectives.
Share expected outcomes and impact assessments to encourage buy-in on target end state.
Cultivate and maintain an internal network of subject matter experts to advise on questions and contribute to program delivery as required.
Align with program management teams in other regions or business verticals to share best practices and collaborate on cross-divisional or cross-regional initiatives as appropriate.
-----------------------------------
**Qualifications and Skills**
We are seeking a skilled project manager with the following qualifications:
1. Knowledge of security frameworks such as FFIEC, NIST, and CIS.
2. Excellent communication and interpersonal skills to communicate complex issues to technical and non-technical stakeholders.
3. Excellent analytical and data handling skills producing accurate metrics.
4. Proficient working with Jira/Confluence, including some experience with configuration.
5. Working knowledge of system development lifecycle (SDLC) and process change/improvement.
6. Strong facilitator who can lead group sessions and is equally comfortable in a collaboration role with business and technical resources at all levels, including senior management.
7. Broad working knowledge of Agile frameworks is preferred: Scrum, Kanban, Lean, XP, and other advanced Agile frameworks (SAFe, DAD, etc.).
8. Prior experience working within the financial services industry is preferred.
9. Prior experience working with ServiceNow Security Operations is preferred.
10. Certification in a related project management process (PMI-PMP or PRINCE2) is preferred.
11. Tools: Proficiency in ServiceNow SPM is preferred.
12. Software Systems / Programming Languages: MS Office, MS Visio, MS Project, Enterprise Resource Management tools, CMMI/ITIL/COBIT is preferred.