Vice President, Operational Resilience Third-Party

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

The anticipated salary range for this role is between $125,000.00 and $170,000.00. The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar roles at the time of hire. The role may also be eligible for an annual discretionary incentive award. In addition to cash compensation, SMBC offers a competitive portfolio of benefits to its employees.

Job Summary

The Operational Resilience Third-Party Vice President will be responsible for strengthening the Firm's operational resilience framework through proactive oversight of critical third-party service providers and resilience-related risk management activities. This role leads the ongoing monitoring of critical vendor performance, identifies and responds to material third-party risk events, and partners closely with Third-Party Risk Management (TPRM), Information Technology, Cybersecurity, and Business Owners to assess, mitigate, and manage vendor-related risks.

The position supports end-to-end Operational Resilience Third-Party Risk Assessments (TPRAs) across the third-party lifecycle, including planning, due diligence, contracting, ongoing monitoring, and termination activities as it relates to resilience domain. The individual develops and maintains contingency plans, exit strategies, risk acceptance inventories, and remediation tracking processes to ensure the Firm can effectively respond to, recover from, and adapt to disruptions impacting critical third parties and Important Business Services.

Additionally, the role drives the implementation of key operational resilience program components, including governance, scenario development, testing, crisis management, and regulatory compliance. The successful candidate will provide risk reporting and analysis on emerging threats, vulnerabilities, and resilience gaps, support risk acceptance and issue management processes, and promote awareness and adoption of resilience principles across the organization. This position plays a critical role in fostering a strong culture of resilience while ensuring alignment between operational risk management, third-party risk management, and regulatory expectations.

Responsibilities of the Department include assisting in creating resilience strategies, policies, and framework specific to SMBC that reflect changes to the environment and business operations; delivering business analytics and reporting, monitoring, and analyzing key risk and control indicators. The ORVP will expand function responsible for defining and delivering SMBCs Operational Resilience program partnering with stakeholders across the three lines of defense.

The Operational Resilience team is accountable for (1) identifying all SMBC Americas Division (AD) Important Business Services, (2) create end-to-end process mapping and identify underlying people, technology, and vendor assets associated with delivering the service, (3) test all Important Business Services (IBS) and (4) create Service Playbooks for each IBS on how to deliver the service in a crisis

Role Description

• Collaborate with Business Owners to create contingency plans and advise on exit strategies for the Firm's most critical vendors
• Support the understanding of where third-party relationships exist, the services they provide, ability to recover, recovery alignment to service level recovery, interconnectedness of third parties, and review of their alignment to the Important Business Service
• Asist in the execution of end-to-end Operational Resiliency Third-Party Risk Assessments (TPRAs) for Critical vendors. Participates in Planning, Due Diligence, Contract, Ongoing Monitoring, and Termination life cycle with Third Party Management Office
• Maintain the enterprise third-party risk acceptance and control inventory: risk ratings, control statuses, assessment due dates, and remediation ownership
• Continually improve key program components across required Operational Resilience workstreams, including but not limited to Governance, Scenario Development, Testing, and Crisis Management
• Track all remediation actions from contingency plan testing to verified closure; produce ageing analysis; escalate or initiate Risk acceptance process for overdue issues
• Support efforts around education, awareness, and adoption of the Critical vendor engagement resilience program across Americas Division (AD). Foster and grow a "Culture of Resilience" at SMBC
• Connect and align SMBC's operational risk management processes with the operational resilience framework
• Provide risk-related preparation and reporting on risks, threats and vulnerabilities that could disrupt business operations

Qualifications and Skills

• Knowledge of project execution and delivery with proven track record of successful large, complex, multi-team projects
• Knowledge of core competencies across the 4 Pillars of Operational Resilience (1.) Business Resilience, (2.) Technology Resilience, (3.) Third Party Resilience, and (4.) Cyber Resilience
• Knowledge of payments, loans, trading and settlement, life cycles
• Strong communication, interpersonal, problem solving, organizational and time management skills
• Familiarity with operational risk and enterprise risk management best-practices and controls
• Advanced proficiency in Microsoft PowerPoint, including the development of executive presentations, governance materials, process flows, dashboards, and data-driven visualizations for senior stakeholder communication
• Advanced proficiency in Microsoft Excel, including data analysis, PivotTables, dashboards, reporting, advanced formulas, and data visualization to support business decision-making and risk management

SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.

SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal, state, and local law. If you need a reasonable accommodation during the application process, please let us know at accommodations@smbcgroup.com.