Cybersecurity Risk Senior Specialist

Truist Bank • Richmond, VA

1d

About The Position

Key contributor to Truist’s second-line-of-defense (LoD2) Technology Risk team, providing independent risk oversight of Security Defense Risk domains. The role partners with Truist Protection Services (TPS) teammates and stakeholders in assigned oversight areas, advises on risk-related topics, challenges risk-program execution, and independently evaluates cybersecurity risk across Truist.

The position provides oversight and consultation to Truist Protection Services and related business units, stewarding the Cybersecurity Risk Framework with a focus on cybersecurity defense, detection, incident response, and related capabilities. It independently assesses technology maturity and cybersecurity controls, supports a proactive risk culture, monitors legal and regulatory matters, and leads complex projects with broad technology and enterprise impact. The role works across matrixed teams and bridges risk, business, technology, and cybersecurity functions.

Requirements

• Bachelor’s degree or an equivalent combination of education and experience.
• 10 or more years of banking, technology, operations, or risk management experience.
• Strong business acumen, management experience, problem-solving, critical-thinking, influencing, and decision-making skills.
• Ability to operate independently and navigate ambiguity to deliver value.
• Excellent interpersonal and communication skills, including the ability to establish credibility with all levels of management.
• Demonstrated ability to organize and manage complex initiatives and deliver high-quality executive-level work products.
• Comfort with data and applying analysis to derive value-added insights.
• Proficiency with Microsoft Office products.
• Ability to work in interdisciplinary, matrix environments.
• Strong cybersecurity technical acumen.

Nice To Haves

• Master’s degree in Cybersecurity, Computer Science, Information Security, Engineering, Risk Management, or a related discipline.
• Familiarity with financial services cybersecurity laws, regulations, supervisory guidance, and industry standards, such as the FFIEC IT Examination Handbook, NIST Cybersecurity Framework, NIST SP 800-61, ISO/IEC 27001, and CIS Critical Security Controls.
• Familiarity with risk measurement approaches, including developing Key Risk Indicators and thresholds, and associated reporting and analytics tools such as Tableau.
• Familiarity with enterprise Governance Risk and Compliance (eGRC) platforms and tools such as RSA Archer.
• Professional cybersecurity certification such as CISM, CISSP, or another relevant cybersecurity designation.
• Extensive technical cybersecurity experience, preferably in security operations, incident response, threat detection, threat hunting, digital forensics, or cyber incident management.

Responsibilities

• Provide independent LoD2 risk oversight and consultation to Truist Protection Services and related business units by identifying, mitigating, monitoring, and reporting technology and related risks.
• Serve as a subject matter expert and steward of the Cybersecurity Risk Framework, focusing on cybersecurity defense, detection, incident response, and related security capabilities.
• Independently assess technology maturity and the adequacy of cybersecurity controls, including detection, investigation, response, and recovery capabilities.
• Strengthen proactive risk culture through risk-focused management and partnership routines with technology teams and internal partners.
• Interface with senior leaders and key partners across the organization.
• Review and challenge outcomes of first-line-of-defense risk program execution.
• Monitor legal, regulatory, compliance, and audit matters for assigned Enterprise Technology oversight areas and ensure timely action.
• Lead complex projects with broad technology and enterprise impact, including implications or resource requirements beyond risk management.
• Provide informal leadership and serve as a resource on complex solutions.
• Bridge risk, business, technology, and cybersecurity functions, shifting between advisory and implementation consulting roles.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment coverage
• Tax-preferred savings accounts
• 401(k) plan
• At least 10 days of vacation during the first year, prorated based on hire date and full-time or part-time status
• 10 sick days, prorated
• Paid holidays
• May be eligible for a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan, depending on position and division

What This Job Offers

• Job Type: Full-time
• Career Level: Senior