> Markdown version of [/jobs/ext/2253554-vice-president-control-design-and-monitoring-tech-cyber-data](https://www.wearedevelopers.com/jobs/ext/2253554-vice-president-control-design-and-monitoring-tech-cyber-data). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Vice President, Control Design and Monitoring - Tech, Cyber, Data - **Company:** SMBC, L.C. - **Location:** Charlotte, NC, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Document Management Systems, Identity and Access Management, Data Logging, Data Management - **Published:** August 26, 2026 - **Apply:** https://dejobs.org/x/x/1D045EB8835F4CE3BB012D4FE00C2EFD/job/ ## About the Role * 5+ year experience in Audit/ Operational Risk/ First Line Control Testing with strong understanding and knowledge of financial services industry, with at least 3-5 years of specialized experience within Cybersecurity and Technology Risk and Controls Assurance * Hands-on experience performing design and operating effectiveness testing of technology/cyber controls, with ability to document Control testing findings and perform trend analysis and report production * Expertise in control frameworks, control assessment and control monitoring programs * Strong communication (both written and verbal) and time management ability * Experience interacting with senior management within a business environment * Strong critical thinking, analytical and organizational skills * Strong understanding of control frameworks and standards such as NIST CSF / NIST 800-53, ISO 27001, CRI Profile, CSA CCM, COBIT, FFIEC and/or internal banking control frameworks (FRB, NYDFS) * Demonstrated knowledge of cyber security control domains (IAM, vulnerability/patch, monitoring/logging, endpoint, network, cloud) * Preferred Certifications: CISA, CISSP, CISM, CRISC, CIA (any combination) EOE, including Disability/veterans ## Description The Business Control Office (BCO) has the responsibility to ensure the implementation of consistent risk control frameworks and establishment of efficient risk controls across SMBC Group AD. The Control Design and Monitoring function is a central BCO function responsible for overall development and execution of 1st line control testing and monitoring program. The VP, Cybersecurity, Data & Technology Controls Testing and Monitoring is responsible for evaluating the design and operating effectiveness of key Cybersecurity, Data and Technology controls within a financial services environment. This role requires conducting control deep dives, executes controls validation/testing (including sample-based testing), develops and performs ongoing control monitoring routines, and partners with Technology, Data and Cybersecurity stakeholders to identify control gaps, drive remediation, and enhance the overall Information Security control environment. The role requires strong expertise in IT risk management, data management and cyber security, and control assurance, with demonstrated ability to operate across first line technology teams, second line risk/compliance, and internal audit. * Execute risk-based control testing across cybersecurity, data management and technology domains to ensure compliance with internal policies and applicable rules, laws, and regulations * Perform Control Monitoring/ Testing routines with detailed documentation, walkthroughs, analysis and evaluation of the current processes * Assess the effectiveness of the controls and make recommendations for enhancement and strengthening of the control environment * Prepare detailed work-papers and Monitoring results reports summarizing scope, methodology, and significant conclusions of testing/ monitoring performed within prescribed time frames * Clearly communicate the Program requirements and the results with stakeholders and drive remediation where needed * Assist in the reporting and tracking of identified issues and corrective action plans to validate remediation efforts * Perform deep dives of Cybersecurity, Data and Technology controls across all assets to identify areas of control weaknesses and process inefficiencies that may need enhancement * Possesses solid background knowledge and understanding of Technology, Data Management, and Cyber Security standards, frameworks, policies and compliance regulations ## Related Videos - [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)