Leads the Americas Division’s information security and cybersecurity governance program under the CISO. Responsibilities include maintaining policies, overseeing risk assessments and controls, coordinating incident response, managing exceptions and remediation, supporting regulatory examinations and audits, monitoring emerging threats and regulations, and preparing cybersecurity metrics and reports for senior management. The role also coordinates with global and regional security teams and provides guidance on information risk management.
This role is located in New York City and will require a hybrid work schedule of at least 2 days in office per week.
Department Overview:
Your Role Overview:Your Qualifications:Why you should join SuMi Trust:SuMi Trust embraces flexible ways of working when the business and role permits. We provide employees with a hybrid working model, allowing for in-office work and work from home. Our diverse and inclusive environment along with our global presence enables us to collaborate and communicate to meet our business needs. We believe that efficient teams need truth, loyalty, and a strong sense of purpose to balance risk and their targets. We make sustainable business decisions to improve our society and the world. We believe that each person brings a unique value that drives the business though their creativity and passion.
This role is for Vice President level candidates.
About the Bank:
Sumitomo Mitsui Trust Bank, Limited was established through the merger of The Sumitomo Trust and Banking Co., Ltd with Chuo Mitsui Trust and Banking, Ltd. on April 1, 2012. We are one of the largest asset managers in Asia and number one among Japanese financial institutions by AUM, with approximately $850 Billion USD in AUM. The Bank provides an assortment of financial solutions and manages a broad spectrum of financial products across its global branches.Department Overview:
The Americas Division (“AD”) was established in the Sumitomo Mitsui Trust Bank, Limited, New York Branch) (“SMTBNY”) to perform corporate functions and supervise U.S. entities. Established under the AD are the “Global Banking Unit (“GBU”), Americas Division” and “Global Markets Unit (“GMU”), Americas Division” which performs business functions. Information Risk Governance (“IRG”) provides oversight to information and cyber security risk by maintaining and improving branch wide framework that is in-line with the Head Office and regulatory requirements and addresses Confidentiality, Integrity, and Availability for information assets. IRG establishes appropriate policies, procedures, measurement, and monitoring processes to proactively assess and evaluate cyber security and information security risks inherent in the Branch Operations. IRG is directly involved in all information and cyber security related projects, matters, and issues.
Your Role Overview:
The Information Security Officer (ISO) serves as the Chief Information Security Officer’s principle operational delegate. The ISO is responsible for leading the day-to-day governance, administration, and continuous improvement of the Americas Division’s Information Security and Cybersecurity program.
Working under the direction of the CISO, the ISO translates the Americas Division’s information security strategy, risk appetite, regulatory obligations, and enterprise requirements into an effective operating program.
Your Duties and Responsibilities:
- Administer and continuously improve the Americas Division information security and cybersecurity program, including policies, standards, procedures, control requirements, and evidence repositories.
- Translate CISO direction, enterprise security requirements, Americas Division risk appetite, and regulatory expectations into actionable objectives, work plans, control requirements, and measurable deliverables.
- Maintain Americas Division information security policies and procedures lifecycle, including periodic review, stakeholder coordination, approval tracking, publication, and exception management.
- Assist the CISO to coordinate with Head Office and US regional affiliate information security teams to ensure that the US-level Information Security risk framework is appropriately adhered to and evidenced.
- Coordinate with security operations, IT, Legal, Compliance, BCP, Head Office, and other relevant stakeholders during cybersecurity incidents, as part of the Incident Response Team.
- Monitor relevant changes in laws, regulations, supervisory expectations, industry practices, and emerging threats and recommend updates to the Americas Division cybersecurity and information security program.
- Oversee and challenge the information security risk assessments as performed by the Risk Management Section of IRG. This includes risk assessments for new products, material technology changes, Cloud/SaaS services, third party engagements, Artificial Intelligence use cases, and other material business initiatives.
- Oversee the effectiveness of key cybersecurity controls, including identity and access management, privileged access, vulnerability management, systems patching, endpoint protection, logging and monitoring, data encryption, secure configuration based on best practices, secure development lifecycle, backup and recovery, as well as data protection.
- Coordinate risk-based control testing and evidence collection, identify control deficiencies, validate remediation, and escalate material or overdue issues to the CISO and appropriate Senior Management. Administer the information security exception process, including documentation of business justification, compensating controls, expiration dates, ownership, risk ratings, and required approvals.
- Ensure that material residual risk decision and risk acceptances are escalated to the CISO and/or other authorized risk acceptance authorities in accordance to policy.
- Coordinate the Americas Division’s operational readiness for applicable cybersecurity and information security regulatory obligations.
- Prepare and maintain documentation, risk assessments, testing records, policy evidence, incident records, third party evidence, and other artifacts needed to support regulatory examinations, internal/external audits, and management reviews.
- Track regulatory and audit findings, drive remediation governance, validate closure evidence, and escalate overdue or high-risk findings.
- Produce timely, accurate, and actionable cybersecurity management information for the CISO, including key risk indicators, control metrics, significant incidents, vulnerabilities, exceptions, audit issues, third-party risks, training results, and remediation status.
- Support the CISO in preparing periodic and annual cybersecurity program reports for Senior Management, governing bodies, and other stakeholders.
- Assist the CISO with the management of all matters related to Information Security and Information Risk Management, including providing guidance to other IRG Department members.
- Performs other duties and responsibilities as assigned by management.
- Certification in Information Security (ISC2 CISSP or ISACA CISM) required.
- 8+ years of Information Security related experience, IT Audit experience, preferred.
- Strong knowledge of Information Security principles, terminologies, and technologies required.
- Strong knowledge of Information Risk Management framework and principles required.
- Ability to analyze and design information security policy, procedures, and activities required.
- Detailed Knowledge and expertise in Technology Risk Assessments and Risk Analysis required.
- Excellent written and verbal communication skills, required.
- Strong skills and prior experience with Microsoft Office (PowerPoint, Excel, and Word) required.
- Strong project management and people management skills required.
- Prior experience developing Risk Management and Oversight Frameworks for Systems Automation, AI, and other novel technologies.
- Prior experience in the Financial Services Industry preferred, especially in a FBO with exposure to NYDFS and FRBNY regulations.
- The Employee Benefits package includes: Paid Time Off, medical, HSA, vision, dental, FSA, 401(k), profit sharing, legal plan, cancer indemnity plan, disability insurance, life insurance, employee assistance program, commuter benefits, business travel accident, paid volunteer day, paid memberships, paid seminars, and tuition assistance.
- We offer many socialization opportunities for wellness, financial wellbeing, runs/walks, team building, happy hours, and activities to support the Sustainable Developmental Goals.
Check out our LinkedIn for our employee experience: https://www.linkedin.com/company/smtbny
We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law. SuMi Trust provides reasonable accommodations for employees and applicants with disabilities consistent with applicable law. If you need a reasonable accommodation during the application
Sumitomo Mitsui Trust Bank, Limited Hoboken, New Jersey, USA Office
111 River St, Hoboken, New Jersey, 07030-5773, United States, Hoboken, United States, 07030-5773
Sumitomo Mitsui Trust Bank, Limited New York, New York, USA Office
1251 Avenue of the Americas 22nd Floor, New York, United States, 10020
Similar Jobs
15 Days Ago
Fintech • Information Technology • Payments • Sharing Economy • Financial Services • Cryptocurrency
Leads information security strategy and execution for the Federal Reserve System’s District IT and Corporate Services portfolio. Advises senior technology and business leaders, manages cybersecurity risk and tolerance, develops resilient security practices, and partners across a matrixed organization to deliver secure technology services. Builds high-performing, AI-savvy teams, drives change and innovation, manages stakeholders and external partners, and aligns security initiatives with business objectives and system standards.
Top Skills:
Artificial IntelligenceCi/CdCybersecuritySecure Sdlc
15 Days Ago
Fintech • Information Technology • Payments • Sharing Economy • Financial Services • Cryptocurrency
Leads information security strategy and execution for the Federal Reserve’s Central Bank Services portfolio, including Markets, Credit Risk Management, and Reserves. Advises senior business and technology leaders, manages cybersecurity risk and resilience, partners across a matrixed organization, develops security strategies, builds AI-savvy teams, drives change and innovation, and ensures secure, reliable technology delivery aligned with business objectives and System standards.
Top Skills:
Artificial IntelligenceCi/CdCybersecurityInformation SecuritySecure Sdlc
15 Days Ago
Fintech • Information Technology • Payments • Sharing Economy • Financial Services • Cryptocurrency
Leads information security strategy and execution for Federal Reserve System IT Operations and Policy portfolios. Advises the System CISO and business and technology leaders, manages cybersecurity risk and resilience, develops secure technology practices, and partners across infrastructure, architecture, data, innovation, and IT business teams. Builds AI-savvy security teams, drives organizational change, strengthens governance, and ensures secure, reliable technology delivery across a geographically dispersed enterprise.
Top Skills:
Ci/CdCloud And Platform SecurityCybersecurityInformation SecurityIt InfrastructureSecure Sdlc
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
