Executive Director - Data Risk Oversight

Role Description

The Executive Director, Data Risk Oversight provides enterprise‑level second line of defense (2LOD) leadership and accountability for Data Risk Management across the SMBC Group Americas Division (AD). The role is responsible for regulatory credibility, consistency of oversight, and independent risk authority over data management and data governance, in alignment with applicable regulations, home office policies, and industry best practices.
Within the Risk Management Department (RMDAD), the Tech, Data, and Cyber Risk Oversight (TDCRO) team provides independent oversight of the firm’s data risk framework, governance, and control environment. The ED serves as a senior risk executive, accountable for setting data risk oversight standards, shaping firmwide data risk posture, and advising senior management and governance committees on material data risk matters.

Role Responsibilities:

•    Provide risk oversight leadership for data programs, regulatory remediation, and transformation efforts.
•    Set expectations for consistency, rigor, and regulatory defensibility of data risk assessments, controls, and issue management across the firm.
•    Lead senior‑level engagement with 1LOD executives, Internal Audit, Compliance, and Regulatory Relations on material data risk matters.
•    Review, challenge, and approve escalation of material data risk issues, including regulatory findings, and MRA/MRIA responses.
•    Oversee key risk management execution for areas such as issue management, risk and control self-assessment (RCSA) processes, key risk indicators

Qualifications and Skills

•    Senior‑level experience providing enterprise data risk governance and independent 2LOD oversight, including setting firmwide standards aligned to regulatory expectations.
•    Direct experience leading regulatory, Internal Audit, and Compliance engagement, including MRA/MRIA remediation.
•    Demonstrated ability to advise senior management and board‑level committees on material data risk posture and control effectiveness.
•    Strong understanding of data, technology, cyber, and operational risk interdependencies within a large financial institution.
•    10–15 years of experience in data management, risk management, or related enterprise oversight roles, with working knowledge of BCBS 239 or similar guidance.
•    Clear, executive‑level communication skills; experience with enterprise data governance platforms (e.g., Collibra or equivalent). 
•    Bachelor’s degree required; Master’s degree preferred.
•    Relevant professional certifications (e.g., CDMP or equivalent) preferred.