Job
- Level
- Erfahren
- Job Feld
- IT, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
- Gehalt
- 64.000 bis 96.000€ Brutto/Jahr
- Ort
- Frankfurt am Main
- Arbeitsmodell
- Hybrid, Onsite
Job Zusammenfassung
In diesem Job bist du verantwortlich für die Identifizierung und das Management von IT- und Cyberrisiken. Du entwickelst und betreibst Kontrollmaßnahmen und unterstützt die Einhaltung regulatorischer Anforderungen in der EMEA-Region.
Deine Rolle im Team
- The IT Risk Manager is a First Line of Defence role responsible for owning and managing technology and cyber risk across EU AG.
- The role sits within Technology and Cyber and ensures risks are identified, assessed, managed and remediated in line with internal frameworks and EU regulatory requirements.
- As a 1LOD role, the IT Risk Manager is responsible for the design, operation and remediation of controls rather than independent oversight or challenge.
- The role embeds effective risk management, governance and reporting within day-to-day Technology and Cyber activities.
- The role also supports EMEA technology and cyber risk initiatives, driving consistency and alignment across the region.
- In addition, the role coordinates regulatory and audit responses, ensuring EU AG meets its obligations across Germany, France and Belgium.
- The role supports the ongoing development of the EU AG risk and control environment, ensuring risks are effectively managed in line with EU regulatory expectations.
- The role works closely with EMEA Technology and Cyber Risk teams to ensure alignment with regional frameworks and initiatives.
- It also interfaces with Group and Second Line teams to maintain alignment with enterprise risk standards.
- The role is key to supporting regulatory engagement, audit readiness and the implementation of DORA and wider ICT risk requirements.
- Own the identification, assessment and management of IT and cyber risks across EU AG.
- Maintain the technology and cyber risk profile, ensuring risks are accurately assessed and actively managed.
- Embed risk management practices within Technology and Cyber teams as part of day to day operations.
- Drive remediation activities to address control gaps, ensuring delivery against agreed timelines.
- Design, implement and operate technology and cyber controls in line with SMBC standards.
- Ensure controls are effective, documented and operating as intended.
- Support control testing and evidence gathering to demonstrate control effectiveness.
- Maintain traceability between risks, controls, issues and remediation actions.
- Own the coordination and delivery of responses to EU regulators across IT and cyber risk topics.
- Ensure compliance with ECB and EBA expectations and applicable local regulatory requirements.
- Support the interpretation and implementation of DORA requirements within EU AG.
- Track regulatory commitments and ensure delivery with a clear audit trail.
- Own and coordinate responses to internal and external audits impacting EU AG.
- Ensure timely provision of complete and accurate audit evidence.
- Manage audit findings, ensuring remediation plans are defined, tracked and delivered.
- Drive sustainable closure of issues and reduction of repeat findings.
- Operate IT and cyber risk governance forums across EU AG.
- Produce regular risk reporting for senior management and key stakeholders.
- Provide clear visibility of risk exposure, control effectiveness and remediation progress.
- Escalate material risks and issues in line with governance requirements.
Unsere Erwartungen an dich
Qualifikationen
- Strong understanding of EU regulatory requirements including ECB, EBA and local regulators.
- Strong understanding of control frameworks and operating effectiveness.
- Strong stakeholder management and communication skills.
Erfahrung
- Strong experience in IT risk and cyber risk within a First Line role.
- Proven experience owning and managing risks and controls within Technology or Cyber functions.
- Practical knowledge and experience of DORA and ICT risk management.
- Experience managing regulatory interactions and audit responses.
- Experience supporting regional or cross entity risk initiatives across EMEA.
Unser Angebot
- The anticipated annual salary range for this role is 64,000 - 96,000 €, with the final offer determined based on the candidate's skills, experience, role scope, location, and relevant market factors.
- In addition to base salary, the role may be eligible for a discretionary incentive award and a competitive benefits package, including core benefits such as pension provision.
- We offer competitive company benefits, centred around promoting positive well-being and work-life balance.
- We also believe in fostering a diverse and inclusive work environment, where all team members' perspectives and contributions are valued.
- Initiatives in place which promote a diverse and inclusive culture and healthy work life balance include hybrid working, Sport & Social Clubs and Diversity and Inclusion networks.
- As an employee of SMBC you have access to a host of both useful and exciting benefit offerings.
- Hybrid and flexible working.
- Competitive paid leave days.
- Benefits to support your physical wellbeing, including private medical insurance.
- Various policies to support your mental wellbeing, including a robust behavioural health network with counselling and coaching services.
- Access a wide range of learning and development opportunities and career progression opportunities.
- Ambitious remuneration package.
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Sumitomo Mitsui Banking Corporation
Die Sumitomo Mitsui Banking Corporation ist eine bedeutende japanische Großbank mit ihrem Hauptsitz in Tokio. Sie ist Teil der Sumitomo Mitsui Financial Group und stellt eine Vielzahl von Bank- und Finanzdienstleistungen zur Verfügung. In Deutschland ist die Bank unter anderem in Frankfurt am Main und Düsseldorf vertreten.
Description
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Hybrid, Onsite
- Branche
- Banken, Finanz, Versicherung
IT Risk Manager - Assistant Vice President
- Gehalt
- 64.000 bis 96.000€ Brutto/Jahr
- Ort
- Frankfurt am Main
- Arbeitsmodell
- Hybrid, Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
- Nur Englisch
- Nur Englisch erforderlich
