Onsite Senior Cybersecurity Risk Officer

Posted 1 hour ago

Apply now

About the role

  • Senior Cybersecurity Risk Officer overseeing Cyber Security and Identity Management for Truist. Guiding senior leaders and providing independent risk oversight across technology operations.

Responsibilities

  • Serve as the independent oversight and effective challenge function to the Chief Information Security Officer covering Cyber Security and Identity and Access Management domains.
  • Provide guidance to senior leaders on critical cyber control failures and issues; escalate significant issues and emerging risks.
  • Evaluate, determine and communicate cyber and access management domain maturity to Executive Leadership and the Board.
  • Support effective risk oversight of Cyber–Fraud integration, emphasizing strong authentication, identity controls, and cyber operations capabilities.
  • Oversee alignment between fraud prevention, IAM, and cyber defense teams for enterprise-level risk management.
  • Provide independent risk oversight for Truist Technology through the identification, mitigation, monitoring, and reporting of operational, technology, and compliance related risks.
  • Provide Cyber and Information Security Risk governance that supports Truist organization’s strategies while operating within established risk appetites.
  • Lead execution of second line Red Team / Penetration Testing commissioned by the Board or other executives.
  • Ensure cyber resources and initiatives are aligned to achieve business objectives while reducing risks.
  • Provide independent assessment and oversight of the maturity of information security and adequacy of cyber controls.
  • Review and attest to/challenge adequacy of risk assessments produced by Business Unit Risk Management.
  • Serve as member of Technology Risk Committee and participate in Enterprise and Board Risk Committees.
  • Ensure effectiveness in regulatory practices and responses.
  • Encourage and monitor Cyber education and skills training to drive improved Cyber risk culture.
  • Engage on Technology Risk policy governance and provide guidance in the development and implementation of Cybersecurity policies.
  • Monitor, assess, and challenge significant third-party and vendor relationships.
  • Develop and maintain effective channels of communication with other CROs and regulatory agencies.
  • Lead, manage and develop teammates directly and indirectly, influencing cybersecurity talent management decisions.

Requirements

  • Bachelor’s degree in financial-related discipline, or equivalent education and related training
  • Fifteen years of experience or equivalent proficiency in managing people with demonstrated high competency in recruiting, developing, and coaching/mentoring
  • Fifteen - Twenty years of experience in a financial institution with emphasis on risk management or equivalent work experience
  • Ten years of large scale technology operations and infrastructure background, including extensive knowledge of technology policy, procedures and regulations
  • Knowledge of key technology rules/regulations and technology risk management practices (e.g. FFIEC, COBIT, NIST, ITIL).
  • Excellent leadership skills including the ability to lead direct and indirect reports
  • Excellent communication (verbal and written), presentation and facilitation skills; ability to influence and communicate with impact.

Benefits

  • Medical
  • Dental
  • Vision
  • Life insurance
  • Disability
  • Accidental death and dismemberment
  • Tax-preferred savings accounts
  • 401k plan
  • 10 days of vacation
  • 10 sick days
  • Paid holidays
  • Defined benefit pension plan (may vary by position)
  • Restricted stock units (may vary by position)
  • Deferred compensation plan (may vary by position)

Job title

Senior Cybersecurity Risk Officer

Job type

Experience level

Senior

Salary

Not specified

Degree requirement

Bachelor's Degree

Tech skills

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job