Sr. Analyst - IT GRC & Service Delivery 1 1

Headquartered in Tokyo, Sumitomo Mitsui Banking Corporation (SMBC) is a leading global financial institution and a core member of Sumitomo Mitsui Financial Group (SMBC Group). Built upon our rich Japanese heritage since 1876, we put our customers first and provide seamless access to, from and within the Asia Pacific region.   SMBC is one of the largest Japanese banks by assets and maintain strong credit ratings across our global integrated network.  We work closely as one SMBC Group to offer personal, corporate and investment banking services to meet the needs of our customers.

With sustainability embedded within our strategy and operations, we are committed to creating a society in which today’s generation can enjoy economic prosperity and well-being, and pass it on to future generations.

• Ensure adherence to IT governance frameworks aligned with SMBC global standards and regulatory requirements.
• Ensure IT policies, procedures, and standards are updated and communicated across regional teams.
• Drive IT compliance initiatives in collaboration with global GRC teams.

• Identify, assess, and monitor IT risks across infrastructure, applications, and third-party vendors.
• Ensure risk assessments for critical systems and cloud environments are conducted in alignment with SMBC policies.

• Ensure compliance with regulatory requirements applicable to SMBC (e.g., RBI, GDPR, SOX, MAS guidelines).
• Coordinate internal and external IT audits; manage findings and remediation plans.
• Perform due diligence and risk assessments for third-party vendors and service providers.

• Monitor vendor compliance with SMBC security and regulatory standards.

• Implement IT controls and monitor effectiveness through regular reviews.
• Prepare risk and compliance dashboards for senior leadership and global reporting.

• Provide timely updates to management on IT risk posture and compliance status.
• Oversee end-to-end delivery of IT services, ensuring adherence to SLAs and KPIs.
• Manage incident, problem, and change processes in line with ITIL best practices.
• Act as the primary point of contact for business units regarding IT service performance.
• Communicate service status, risks, and improvement plans to management.
• Monitor and report on service performance metrics.
• Manage third-party service providers, ensuring contractual compliance and performance.
• Drive vendor governance meetings and escalate issues as needed.
• Support audits and remediation of findings related to service delivery.
• Identify opportunities for automation and process optimization.