
GRC Specialist, Associate
Sumitomo Mitsui Banking Corporation – SMBC Group
full-time
Posted on:
Location Type: Hybrid
Location: Tralee • 🇮🇪 Ireland
Visit company websiteJob Level
JuniorMid-Level
Tech Stack
CloudCyber Security
About the role
- Conduct information security risk assessments for new and existing applications, clients, and regulatory requests.
- Collaborate with IT, business, and compliance teams to identify, assess, and mitigate security risks.
- Continuously improve risk management processes and leverage technology to enhance efficiency.
- Communicate risks and controls effectively to technical and non-technical stakeholders.
- Assist stakeholders with understanding assessment control questions, identifying compensating controls.
- Maintain and update security policies and procedures; educate stakeholders on changes.
- Support remediation and acceptance of identified risks in consultation with senior team members.
- Understand information security controls and associated risks and articulate the risks and controls to both technical and business stakeholders.
- Support risk management tooling such as assessment tools and the risk register.
Requirements
- Strong understanding of information security principles, risk assessment methodologies, and regulatory requirements.
- Basic knowledge of commonly used banking applications, operating systems, and databases.
- Basic knowledge of cloud-based applications and tools.
- Basic knowledge of cyber security and information security best practices and industry frameworks, e.g., NYS DFS Cybersecurity, GLBA, CCPA/CPRA, ISO27001, NIST CSF/800-53, ISO 27001, Center for Internet Security.
- Have strong verbal and written communication skills.
- Ability to demonstrate a self-motivated and disciplined approach to learning and working.
- Ability to work in a team environment and demonstrate leadership skills when needed.
- Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple personal tasks, projects, and goals.
Benefits
- SMBC requires that employees live within a reasonable commuting distance of their office location.
- SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
information security risk assessmentsrisk management processesrisk assessment methodologiescyber security best practicesinformation security controlscloud-based applicationsbanking applicationsoperating systemsdatabasesNIST CSF/800-53
Soft skills
verbal communicationwritten communicationself-motivateddisciplinedteamworkleadershippersonal accountabilityfollow-throughprioritizationstakeholder education
Certifications
ISO27001NYS DFS CybersecurityGLBACCPA/CPRACenter for Internet Security