Cybersecurity Risk Senior Specialist
About The Position
Key contributor to Truist’s second-line-of-defense (LoD2) Technology Risk team, responsible for independent risk oversight of Security Defense Risk domains. The role partners with Truist Protection Services teammates and stakeholders in assigned oversight areas, advises on risk-related topics, challenges risk-program outcomes, and independently evaluates cybersecurity risk across Truist. The position provides independent risk oversight for Truist Protection Services and related consultation to Truist business units, identifying, mitigating, monitoring, and reporting technology and related risks within Enterprise Technology. It serves as a subject matter expert and steward of the Cybersecurity Risk Framework, with a focus on cybersecurity defense, detection, incident response, and related security capabilities. The specialist independently assesses technology maturity and cybersecurity control adequacy in support of performance, stability, security, service availability, and detection, investigation, response, and recovery capabilities. The role builds proactive risk culture through risk-focused management and partnership routines, interfaces with senior leaders and organizational partners, reviews and challenges first-line risk-program execution, and monitors legal, regulatory, compliance, and audit matters. It also leads complex projects with broad technology and enterprise impact, provides informal leadership and serves as a resource on complex solutions, and works across matrixed disciplines to bridge risk, business, technology, and cybersecurity functions. The position pivots between advisory and implementation consulting roles.
Requirements
- Bachelor’s degree or an equivalent combination of education and experience.
- 10 or more years of banking, technology, operations, or risk management experience.
- Strong business acumen or knowledge, management experience, problem-solving, critical-thinking, influencing, and decision-making skills.
- Ability to operate independently and navigate ambiguity to deliver value.
- Excellent interpersonal and communication skills, including the ability to establish credibility with all levels of management.
- Demonstrated ability to organize and manage complex initiatives and deliver high-quality, executive-level work products.
- Comfort with data and applying analysis to derive value-added insights.
- Proficiency with Microsoft Office products.
Nice To Haves
- Master’s degree in Cybersecurity, Computer Science, Information Security, Engineering, Risk Management, or a related discipline.
- Familiarity with financial-services cybersecurity laws, regulations, supervisory guidance, and industry standards, such as the FFIEC IT Examination Handbook, NIST Cybersecurity Framework, NIST SP 800-61, ISO/IEC 27001, and CIS Critical Security Controls.
- Familiarity with risk measurement approaches, including developing Key Risk Indicators and thresholds, and associated reporting and analytics tools such as Tableau.
- Familiarity with enterprise Governance Risk and Compliance (eGRC) platforms and tools such as RSA Archer.
- Professional cybersecurity certification such as CISM, CISSP, or another relevant cybersecurity designation.
- Extensive technical cybersecurity experience, preferably in security operations, incident response, threat detection, threat hunting, digital forensics, or cyber incident management.
Responsibilities
- Provide independent second-line risk oversight for Truist Protection Services and related consultation to Truist business units, including identification, mitigation, monitoring, and reporting of technology and related risks within Enterprise Technology.
- Serve as a subject matter expert and steward of the Cybersecurity Risk Framework, focusing on cybersecurity defense, detection, incident response, and related security capabilities.
- Independently assess and oversee technology maturity and the adequacy of cybersecurity controls, including detection, investigation, response, and recovery capabilities.
- Strengthen and sustain proactive risk culture by conducting risk-focused management and partnership routines with technology teams and internal partners.
- Interface with senior leaders and key partners across the organization.
- Review and challenge the outcomes of first-line-of-defense risk-program execution.
- Monitor legal, regulatory, compliance, and audit matters for assigned Enterprise Technology oversight areas and ensure timely action.
- Lead complex projects with broad technology and enterprise-level impact, including projects with implications or resource requirements beyond risk management.
- Provide informal leadership to others and serve as a resource on complex solutions.
- Bridge risk, business, technology, and cybersecurity functions in interdisciplinary, matrix environments, shifting between advisory and implementation consulting roles.
Benefits
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Disability insurance
- Tax-preferred savings accounts
- 401(k) plan
- At least 10 days of vacation during the first year, prorated as applicable
- 10 sick days, prorated as applicable
- Paid holidays
- Potential eligibility for a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan, depending on position and division
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
