Provide independent risk oversight (i.e. second line of defense/LOD2) enterprise-wide for Enterprise Control Functions through effective identification, mitigation, monitoring and reporting of operational, technology, compliance and strategic risks
Provide strategic risk advisory to ECF leads that supports Truist organization’s strategies while operating within established risk appetites
Lead engagement of peer institution second line functions
Lead execution of independent second line testing/evaluations (e.g. Red Team/Penetration Testing)
Ensure that resources, activities and initiatives are aligned to enable achievement of business objectives within forecasted spend rates while reducing risks
Provide independent assessment and oversight of the maturity of technology risk domains
Review and attest to/challenge adequacy of risk assessments produced by BURM
Serve as member of the Technology Risk Committee and participate in Enterprise and Board Risk Committees
Ensure effectiveness and structure in regulatory engagement practices
Encourage and monitor risk education, skills training and adoption of goals to drive improved risk culture
Engage on ECF Risk policy governance
Monitor, assess and challenge significant third-party and vendor relationships within Enterprise Technology
Develop and maintain effective channels of communication with other BU CROs, control functions, and regulatory agencies
Lead, manage and develop teammates directly and indirectly
Participate in applicable mergers and acquisition target evaluation
Requirements
Advanced degree in business or financial-related discipline, or equivalent education and related training
Twenty years of experience or equivalent proficiency in managing people with demonstrated high competency in recruiting, developing, and coaching/mentoring
Fifteen years of experience in a financial institution (or large corporate equivalent) with emphasis on risk management or equivalent work experience
Ten years of large ECF and related technology operations, including extensive knowledge of technology policy, procedures and regulations
Knowledge of key technology rules/regulations and technology risk management practices (e.g. FFIEC, COBIT, NIST, ITIL)
Strong leadership skills including the ability to lead direct and indirect teammates
Excellent communication (verbal and written), presentation and facilitation skills; ability to influence and communicate with impact
Experience presenting to Executive Leadership and Board level
Superior ability to think critically and strategically
Senior Manager leading data governance initiatives for EDF power solutions focused on renewable energy solutions. Establishing frameworks, managing teams, and driving data quality standards in a collaborative environment.
Business Unit Risk Advisor managing business continuity and disaster recovery program requirements at Truist. Collaborating with leadership to mitigate risk and ensuring compliance in a financial context.
Business Unit Risk Advisor managing risks and controls within Technology Business Unit at Truist. Executing risk program requirements and advising leadership on risk management strategies.
Lead Governance Operations at lemon.markets, ensuring compliance and operational excellence. Drive innovation in European FinTech with a focus on secure infrastructure.
Data Governance Consultant at iKnowHow S.A. shaping data governance initiatives and working closely with clients. Designing, implementing, and optimizing governance strategies for data quality and management.
SAP System Management and Governance Tool Specialist managing batch job automation and compliance within Airbus ERP systems and landscapes. Collaborating in an international team to enhance data security and process improvements.
Senior Analyst managing operational risk compliance and controls for Mastercard's Vocalink in the UK. Collaborating with teams to ensure robust operational risk practices.
Head of Risk Products driving risk strategy and delivering risk platform solutions at fintech startup. Collaborating with teams to prevent fraud and abuse in payment ecosystems.
Senior Manager in High Risk Client Management at RBC, overseeing EDD risk assessment processes for high risk clients. Partnering with Financial Intelligence and Compliance teams to ensure timely management and oversight of risk assessments.
Governance Analyst for IT at Catupiry, implementing IT frameworks and managing governance policies. Responsible for financial oversight and internal compliance in a hybrid work model.