FAQs
What are the primary responsibilities of the Director, Regulatory Compliance?
The primary responsibilities include managing and monitoring technology, audit and regulatory risk, overseeing the audit and regulatory calendar, driving annual compliance attestation processes, supporting a data-driven program, managing strategic initiatives related to Third Party Risk Management and Vendor Management, identifying and managing information security risks, and mentoring junior team members.
What experience is required for this position?
A candidate should have 7+ years of experience in related work, with demonstrated experience working with key Information Security frameworks such as NIST and FFIEC CAT.
What skills are essential for the Director, Regulatory Compliance role?
Essential skills include a proactive problem-solving approach, knowledge of domestic and international information security laws, familiarity with information security technologies and solutions, understanding of cybersecurity risk management techniques, and the ability to promote inter-team collaboration.
How does this role interact with regulatory and audit activities?
The role involves managing the audit and regulatory calendar, which includes all regulatory and audit interactions, findings, and reviews, while coordinating with team members across the organization to ensure effective communication and execution.
What kind of mindset is expected from candidates for this position?
Candidates are expected to have a "big picture" thinking mindset, with the ability to apply organizational acumen to maintain focus on key success factors and drive execution of goals through effective planning and resource management.
What opportunities for growth and mentorship does this role offer?
The role offers the opportunity to be a Coach/Mentor to junior team members, providing guidance and support in their professional development within the Information Security GRC team.
What technologies and trends should candidates be familiar with?
Candidates should have a demonstrated understanding of technological trends and developments in information security, risk management, web architectures, and cloud computing, as well as the ability to implement best practices within Information Security.
What is the reporting structure for this position?
The Director, Regulatory Compliance will report to the Head of Information Security GRC as part of the Technology Information Security GRC Team.
How does this role contribute to the overall Information Security Program?
This role plays a key part in driving strategic initiatives and maintaining operational excellence within the Information Security Governance, Risk, and Compliance (GRC) function, which is integral to the broader Santander US Information Security Program.