Senior Technology Resilience Risk Oversight Leader at Truist independent assessing technology resiliency and challenging effectiveness of technology and cyber resilience programs.
Responsibilities
Provide independent risk oversight (i.e. second line of defense/LOD2) enterprise-wide for Enterprise Control Functions through effective identification, mitigation, monitoring and reporting of operational, technology, compliance and strategic risks
Provide strategic risk advisory to ECF leads that supports Truist organization’s strategies while operating within established risk appetites
Lead engagement of peer institution second line functions
Lead execution of independent second line testing/evaluations (e.g. Red Team/Penetration Testing)
Ensure that resources, activities and initiatives are aligned to enable achievement of business objectives within forecasted spend rates while reducing risks
Provide independent assessment and oversight of the maturity of technology risk domains
Review and attest to/challenge adequacy of risk assessments produced by BURM
Serve as member of the Technology Risk Committee and participate in Enterprise and Board Risk Committees
Ensure effectiveness and structure in regulatory engagement practices
Encourage and monitor risk education, skills training and adoption of goals to drive improved risk culture
Engage on ECF Risk policy governance
Monitor, assess and challenge significant third-party and vendor relationships within Enterprise Technology
Develop and maintain effective channels of communication with other BU CROs, control functions, and regulatory agencies
Lead, manage and develop teammates directly and indirectly
Participate in applicable mergers and acquisition target evaluation
Requirements
Advanced degree in business or financial-related discipline, or equivalent education and related training
Twenty years of experience or equivalent proficiency in managing people with demonstrated high competency in recruiting, developing, and coaching/mentoring
Fifteen years of experience in a financial institution (or large corporate equivalent) with emphasis on risk management or equivalent work experience
Ten years of large ECF and related technology operations, including extensive knowledge of technology policy, procedures and regulations
Knowledge of key technology rules/regulations and technology risk management practices (e.g. FFIEC, COBIT, NIST, ITIL)
Strong leadership skills including the ability to lead direct and indirect teammates
Excellent communication (verbal and written), presentation and facilitation skills; ability to influence and communicate with impact
Experience presenting to Executive Leadership and Board level
Superior ability to think critically and strategically
Microsoft 365 & Purview Governance Architect in Managed Services Provider environment. Leading security, compliance, and architecture initiatives for diverse client environments.
Seeking a Data Governance Expert to lead Microsoft Purview implementations for enterprise - scale data governance. Role combines technical execution with governance program design in a hybrid work environment.
Director, Claims Risk Management for Sun Life Canada responsible for excellence in claims risk assessment and leading claims adjudicators. Collaborating with internal and external parties to enhance the claims experience.
Segment Risk Manager overseeing operational and regulatory risk strategy programs for a business segment. Evaluating controls, collaborating with management, and ensuring compliance with corporate policies.
Lead Adobe’s Security Risk and Governance program by advancing risk strategy with data analysis and insights. Manage security framework and collaborate with senior leadership for effective risk management.
Consultant in Business Consulting Risk at EY assessing risk management frameworks and providing insights. Work includes collaborating with clients to enhance contract value and manage risks effectively.
Senior Consultant in Business Consulting Risk at EY, working on client engagements and risk management strategies. Providing technical excellence and leading teams to address key risk areas.
Senior Consultant at EY transforming businesses by managing client engagements in risk management. Leading teams in executing projects and developing tailored mitigation strategies for clients.
Analyst in Business Consulting Risk at EY focusing on risk management. Assisting clients with tailored consulting solutions to enhance their risk frameworks and compliance.
Governance interface expert managing regulations and IKT - related controls at Zurich's Köln office. Ensuring compliance and working with stakeholders to improve digital resilience and information security.