Cybersecurity Risk Senior Specialist

Truist Bank • Richmond, VA

1d

About The Position

Key contributor to the Truist second line-of-defense (LoD2) Cyber Security and Fraud Risk team responsible for independent risk oversight of one or more Cyber Security/Fraud risk domains within Information Risk management. Partner with Enterprise Technology teammates and stakeholders in assigned oversight areas, advise on risk-related topics, effectively challenge through risk programs, and independently evaluate technology risk in the Truist environment.
Justification

Requirements

• Bachelor's Degree or an equivalent combination of education and experience.
• Ten+ years of banking, technology, operations or risk management experience including experience working within one or more Cyber Risk oversight domains such VPM, DLP, encryption, IAM, network security, security operations.
• Strong business acumen / knowledge, management experience, problem solving, critical thinking, influencing and decision-making skills.
• Experience operating independently and navigating ambiguity to deliver value.
• Excellent interpersonal and communication skills demonstrating the ability to establish credibility with all levels of management effectively.
• Demonstrated ability to organize and manage complex initiatives and deliver high-quality, executive level work products.
• Comfort with data and applying analysis to derive value-add insights.
• Adept with Microsoft Office products.

Nice To Haves

• Master's degree in Business Administration (MBA) or advanced degree in Business Management, Technology or Finance.
• Familiarity with financial services technology-related laws, rules, regulations, and risk management standards (e.g. Federal Financial Institutions Examination Council (FFIEC), Control Objectives for Information and Related Technology (COBIT), NIST (National Institute of Standards and Technology), Information Technology Infrastructure Library (ITIL)).
• Familiarity with regulations applicable to enterprise fraud (Reg E, Reg CC, UDAAP, AML) and/or first line experience managing fraud related cases, filing regulatory reports, and a deep understanding of fraud vulnerabilities inherent in our products & services (e.g. ach/wire transfers)
• Familiarity with risk management & governance activities to include, but not limited to: policy and framework development, leading risk assessments, developing key risk indicators and thresholds, and incident response and remediation
• Familiarity with enterprise Governance Risk and Compliance (eGRC) platforms and tools (e.g., RSA Archer). Professional risk management designations such as Certified Fraud Examiner (CFE), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (Information Systems Audit and Control Association), and/or Project Management certification.

Responsibilities

• Provide independent risk oversight (i.e. LOD2) for Truist Technology and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk and other related risks (e.g., operational, compliance) within Enterprise Technology.
• Serve as a subject matter expert and steward of the Information Risk Framework to identify, report and mitigate information risks.
• Execute independent assessment and oversight of the maturity of technology and adequacy of technology controls to achieve business outcomes for performance, stability, security and service availability.
• Strengthen and sustain proactive risk culture through conducting effective risk focused management and partnership routines with technology teams and internal partners. Interface with senior leaders and key partners across the organization.
• Review and challenge outcomes of first line-of-defense risk program execution.
• Monitor legal, regulatory, compliance and audit matters for assigned Enterprise Technology oversight area(s) and ensures timely action.
• Lead complex projects that have broad technology and enterprise level impact with implications and/or resource requirements beyond risk management. Provide informal leadership to others and serves as a resource on complex solutions.
• Comfortable in interdisciplinary, matrix environments. Use acumen and skills to effectively bridge business and IT functions seamlessly. Pivot quickly between advisory consultant and implementation consultant roles.

Benefits

• Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates.
• Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays.
• Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees