Cyber Business Risk Officer

Select how often (in days) to receive an alert:

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan.

SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network.

The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

The Cyber Business Risk Officer (CBRO) serves as the strategic risk partner between Cybersecurity and assigned business and technology organizations, providing an integrated view of cybersecurity risk, remediation, governance, and business impact.

The role is responsible for translating cybersecurity risk into actionable business priorities, establishing effective governance and reporting, and driving transparency and accountability for risk reduction. The Cyber Business Risk Office will partner with Cyber GRC to help the business lines, group companies, and technology teams prioritize and focus on the most impactful cyber risk reduction activities.

The CBRO brings together risk insight, business context, metrics, governance, and execution to enable informed leadership decisions and demonstrate measurable risk reduction.

• Serve as the senior cybersecurity risk partner to assigned CIO and business organizations.
• Develop a holistic view of cybersecurity risk across the organization, connecting technical findings with business impact and strategic priorities.
• Identify material and emerging cyber risks and ensure appropriate visibility, escalation, ownership, and governance.
• Facilitate risk-based prioritization of cybersecurity investments and remediation activities.
• Promote consistent cybersecurity risk-management practices across organizational boundaries.

• Establish and lead governance forums that provide leadership visibility into cybersecurity risk, remediation, and strategic pri Sorities.
• Develop executive-level cyber risk reporting that clearly communicates exposure, trends, remediation progress, decisions, and areas requiring leadership attention.
• Provide leadership with actionable insights rather than activity-based reporting.
• Establish clear accountability for cybersecurity risks, decisions, and remediation outcomes.
• Support executive, committee, regulatory, and other governance reporting as required.

• Maintain visibility of significant cyber risks, control gaps, findings, exceptions, and remediation commitments.
• Challenge remediation strategies, priorities, target dates, and risk disposition where appropriate.
• Monitor remediation performance and identify systemic issues, dependencies, and barriers affecting risk reduction.
• Escalate material risks and remediation concerns through appropriate governance…