Cyber Data Quality - Vice President

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan.

SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network.

The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

The VP, Cyber Data Quality Analyst, is a critical role within the Information Security department and will report to the Director, Information Security Data Operations for the SMBC Americas Division. This role will be aligned with the Continuous Controls Monitoring (CCM) program. By partnering closely with Cyber GRC and Technology teams, this role ensures that control-related data is accurate, timely, and reliable, enabling CCM to identify control failures, deviations, and emerging risks before they result in security incidents, compliance violations, or operational disruption.

The Cyber Data Quality Analyst will be responsible for creating KCIs (Key Control Indicators) and Data Quality (DQ) rules to continuously assess and report on the effectiveness of ISDAD’s internal controls as part of the firm’s GRC Risk Management and CDO Data Governance frameworks. This is part of the overall cyber data initiative focusing on building the security and risk data platforms for the Cybersecurity Data Lakehouse (Cyber

DW). The goal of the Cyber

DW is to centralize the ISDAD data as well as establish effective data governance around the data sources and its data lineage.

• Operate as the SME for DQ rules for the CCM program. Analyze data sources, data dictionaries, business glossary, data mappings, ETL processes and data within Cyber
  
  DW to understand their structure, relationships, dependencies to quantify and document the data quality rules, controls and lineage around the key data elements (KDEs).

• Partner with the data owners and stakeholders to create KDEs and DQ rules needed for Cyber
  
  DW data. Partner with the Data Owners and Data Stewards to understand what critical metrics and data fields are needed for our Cyber critical controls that align to the CRI Profile and NIST frameworks.

• Creation of technical requirements for implementation and maintenance of DQ rules in the Collibra Data Quality (CDQ) platform and KDEs in the Collibra Data Intelligence platform. Partner with Technology and DQ Managers to ensure KDEs are governed by DQ Rules across various DQ dimensions of accuracy, completeness, uniqueness, timeliness, validity and consistency. Support reporting on data quality metrics and trends.

• Perform data validations and reconciliations to assess validity and effectiveness of the DQ rules, conduct QA and UAT, create and maintain detailed test plans, execute test cases, and test scripts to validate CDQ results.

• Analyze and “scrub” data to identify patterns, anomalies, inconsistencies, and root causes. Maintain a reusable library of rules, thresholds, exceptions, and documentation.

• Bachelor’s degree in computer science, Information Security, Data Management, or related field

• 10+ years’ experience in IT development, data governance, data analyst or related roles, preferably in a highly regulated…