SMBC Group Security Team

Security at SMBC Group

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

SMBC Group views cybersecurity risks as a top management concern.
They have established a Group CISO position and employ over 700 cybersecurity professionals.
The group regularly conducts vulnerability diagnostics and threat-based penetration testing.
A 'security by design' philosophy is also applied for IT system planning staff.

The team

Daisuke Shirai is the named Group CISO.
Taiju Aoki is the president of SMBC CyberFront Co., Ltd., an SMBC Group subsidiary, whose mission is to connect the opinions of management and IT personnel.
The SMBC Group has over 700 cybersecurity professionals.
An external job posting for an Application Security Engineer highlights responsibilities focused on working closely with the development community.
The SMBC Group careers site also lists multiple security and enterprise security roles.

What they're working on

SMBC Group's initiatives include regular vulnerability diagnostics and penetration testing.
They also utilize ASM (Attack Surface Management) tools for customer advisory work through their subsidiary.
A SOC (Security Operations Center) and a CSIRT (Computer Security Incident Response Team) have been established.
However, public information regarding explicit AppSec team structure, security champions programs, specific SAST/SCA/DAST/secret-detection tool names, ticketing SLAs/MTTR for remediation, shift-left CI/IDE integrations, or enterprise GenAI/code-assistant usage is not available.