Job SummaryThe Operational Resilience Third-Party Vice President will be responsible for strengthening the Firm's operational resilience framework through proactive oversight of critical third-party service providers and resilience-related risk management activities. This role leads the ongoing monitoring of critical vendor performance, identifies and responds to material third-party risk events, and partners closely with Third-Party Risk Management (TPRM), Information Technology, Cybersecurity, and Business Owners to assess, mitigate, and manage vendor-related risks.
The position supports end-to-end Operational Resilience Third-Party Risk Assessments (TPRAs) across the third-party lifecycle, including planning, due diligence, contracting, ongoing monitoring, and termination activities as it relates to resilience domain. The individual develops and maintains contingency plans, exit strategies, risk acceptance inventories, and remediation tracking processes to ensure the Firm can effectively respond to, recover from, and adapt to disruptions impacting critical third parties and Important Business Services.
Additionally, the role drives the implementation of key operational resilience program components, including governance, scenario development, testing, crisis management, and regulatory compliance. The successful candidate will provide risk reporting and analysis on emerging threats, vulnerabilities, and resilience gaps, support risk acceptance and issue management processes, and promote awareness and adoption of resilience principles across the organization. This position plays a critical role in fostering a strong culture of resilience while ensuring alignment between operational risk management, third-party risk management, and regulatory expectations.
Responsibilities of the Department include assisting in creating resilience strategies, policies, and framework specific to SMBC that reflect changes to the environment and business operations; delivering business analytics and reporting, monitoring, and analyzing key risk and control indicators. The ORVP will expand function responsible for defining and delivering SMBC's Operational Resilience program partnering with stakeholders across the three lines of defense.
The Operational Resilience team is accountable for (1) identifying all SMBC Americas Division (AD) Important Business Services, (2) create end-to-end process mapping and identify underlying people, technology, and vendor assets associated with delivering the service, (3) test all Important Business Services (IBS) and (4) create Service Playbooks for each IBS on how to deliver the service in a crisis
Role Description- Collaborate with Business Owners to create contingency plans and advise on exit strategies for the Firm's most critical vendors
- Support the understanding of where third-party relationships exist, the services they provide, ability to recover, recovery alignment to service level recovery, interconnectedness of third parties, and review of their alignment to the Important Business Service
- Asist in the execution of end-to-end Operational Resiliency Third-Party Risk Assessments (TPRAs) for Critical vendors. Participates in Planning, Due Diligence, Contract, Ongoing Monitoring, and Termination life cycle with Third Party Management Office
- Maintain the enterprise third-party risk acceptance and control inventory: risk ratings, control statuses, assessment due dates, and remediation ownership
- Continually improve key program components across required Operational Resilience workstreams, including but not limited to Governance, Scenario Development, Testing, and Crisis Management
- Track all remediation actions from contingency plan testing to verified closure; produce ageing analysis; escalate or initiate Risk acceptance process for overdue issues
- Support efforts around education, awareness, and adoption of the Critical vendor engagement resilience program across Americas Division (AD). Foster and grow a "Culture of Resilience" at SMBC
- Connect and align SMBC's operational risk management processes with the operational resilience framework
- Provide risk-related preparation and reporting on risks, threats and vulnerabilities that could disrupt business operations
Qualifications and Skills- Knowledge of project execution and delivery with proven track record of successful large, complex, multi-team projects
- Knowledge of core competencies across the 4 Pillars of Operational Resilience (1.) Business Resilience, (2.) Technology Resilience, (3.) Third Party Resilience, and (4.) Cyber Resilience
- Knowledge of payments, loans, trading and settlement, life cycles
- Strong communication, interpersonal, problem solving, organizational and time management skills
- Familiarity with operational risk and enterprise risk management best-practices and controls
- Advanced proficiency in Microsoft PowerPoint, including the development of executive presentations, governance materials, process flows, dashboards, and data-driven visualizations for senior stakeholder communication
- Advanced proficiency in Microsoft Excel, including data analysis, PivotTables, dashboards, reporting, advanced formulas, and data visualization to support business decision-making and risk management
SMBC's employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home, as well as, from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles, including, for example, certain FINRA-registered roles for which in-office attendance for the entire workweek is required.
