Executive Director - Data Risk Oversight

The Executive Director, Data Risk Oversight provides enterprise-level second line of defense (2LOD) leadership and accountability for Data Risk Management across the SMBC Group Americas Division (AD). The role is responsible for regulatory credibility, consistency of oversight, and independent risk authority over data management and data governance, in alignment with applicable regulations, home office policies, and industry best practices.

Within the Risk Management Department (RMDAD), the Tech, Data, and Cyber Risk Oversight (TDCRO) team provides independent oversight of the firm’s data risk framework, governance, and control environment. The ED serves as a senior risk executive, accountable for setting data risk oversight standards, shaping firmwide data risk posture, and advising senior management and governance committees on material data risk matters.

Role Responsibilities:

• Provide risk oversight leadership for data programs, regulatory remediation, and transformation efforts.

• Set expectations for consistency, rigor, and regulatory defensibility of data risk assessments, controls, and issue management across the firm.

• Lead senior-level engagement with 1LOD executives, Internal Audit, Compliance, and Regulatory Relations on material data risk matters.

• Review, challenge, and approve escalation of material data risk issues, including regulatory findings, and MRA/MRIA responses.

• Oversee key risk management execution for areas such as issue management, risk and control self-assessment (RCSA) processes, key risk indicators

• Senior-level experience providing enterprise data risk governance and independent 2LOD oversight, including setting firmwide standards aligned to regulatory expectations.

• Direct experience leading regulatory, Internal Audit, and Compliance engagement, including MRA/MRIA remediation.

• Demonstrated ability to advise senior management and board-level committees on material data risk posture and control effectiveness.

• Strong understanding of data, technology, cyber, and operational risk interdependencies within a large financial institution.

• 10-15 years of experience in data management, risk management, or related enterprise oversight roles, with working knowledge of BCBS 239 or similar guidance.

• Clear, executive-level communication skills; experience with enterprise data governance platforms (e.g., Collibra or equivalent).

• Bachelor’s degree required; Master’s degree preferred.

• Relevant professional certifications (e.g., CDMP or equivalent) preferred.

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.