Senior Enterprise Data Risk Oversight Manager

Truist Bank•Charlotte, NC

About The Position

Provides senior-level risk oversight and insight to drive implementation of the second-line-of-defense Enterprise Data Risk Oversight (EDRO) Program across the Enterprise Data Office and other enterprise areas. The role requires technical depth in data platforms, data architecture, and artificial intelligence, including Generative AI and Agentic AI, to provide credible, technically informed oversight. The leader anticipates how emerging technologies affect enterprise risk, turns those insights into oversight strategy, and builds technical fluency across the EDRO team to support effective challenge, independent risk assessment, and risk advisory. The position maintains authoritative knowledge of data risks involving emerging AI/ML technologies and evolving regulation, translating that knowledge into risk practices, governance enhancements, and team capabilities. It evaluates technical mitigants throughout the data lifecycle, including safeguards for data protection, privacy, use, retention, storage, resiliency, deletion, lineage, quality, and recovery. The role assesses control design, implementation, monitoring, measurement, effectiveness, limitations, residual risks, and alignment with business and regulatory objectives. Working closely with the first-line Enterprise Data Office, Corporate Function Data Executive Leaders, Data Stewards, and senior and executive stakeholders, the role influences and coordinates program priorities and objectives. It ensures the resources, expertise, processes, practices, tools, and capabilities needed to deliver the program are developed and aligned.

Requirements

Bachelor’s degree in technology, data, business, and/or finance.
At least 15 years of senior management experience in banking, technology, operations, risk management, and/or regulatory agencies.
At least 10 years of experience in data management, governance, analytics, testing, and/or risk management.
Strong experience and understanding of risk and controls framework development, management, and measurement.
In-depth experience with application, process, risk, and control mapping in a complex financial data-management system.
Strong senior leadership, influencing, business acumen, management, problem-solving, critical-thinking, prioritization, and decision-making skills.
Excellent interpersonal and communication skills, with the ability to build credibility and trust across management levels.
Ability to lead and manage a team, including recruiting talent, managing performance, and making resource-allocation decisions.
Functional and technical knowledge of data management, data analytics, and data risk and controls frameworks across data supply chains.
Demonstrated ability to lead and manage effectively in a highly matrixed, complex environment and consistently deliver high-quality executive-level work products.
Demonstrated change leadership skills, including the ability to drive and manage change and navigate ambiguity.

Nice To Haves

Working knowledge of enterprise data platforms and analytical tools such as Snowflake, SAS, Databricks, or comparable environments, sufficient to evaluate data lineage, transformation logic, access controls, and platform-level risk.
Familiarity with cloud-based data architectures and modern data engineering practices, including data lake or warehouse design, API-driven data flows, and automated pipelines.
Master’s degree in business and/or technology.
Data compliance knowledge or experience relating to applicable laws, rules, and regulations.
Experience working with third parties, including onshore or offshore parties and vendors.
Familiarity with Governance, Risk, and Compliance platforms such as Archer.
Experience designing, implementing, overseeing, or assessing technical controls related to data protection, privacy, storage, retention, deletion, resiliency, recovery, and data quality.
Deep understanding of technical data-risk mitigants, including encryption, tokenization, masking, key management, access controls, segmentation, monitoring, data loss prevention, lineage management, reconciliation, validation, and automated control monitoring.
Experience evaluating control effectiveness through metrics, monitoring, testing, and risk-based assessments, including identifying residual risk and control limitations.

Responsibilities

Lead execution of the EDRO coverage and operating model, including risk advisory, effective challenge, and independent risk assessment.
Provide input to the Enterprise Data Management Policy, Enterprise Data Risk Policy, and supporting standards and procedures in light of new data-management laws, rules, and regulations.
Engage and collaborate with senior business partners and stakeholders to communicate and explain EDRO Program requirements and expectations and advance shared objectives.
Act as a strategic risk advisor and business partner while maintaining second-line-of-defense independence; contribute to the EDRO strategic plan, tactical plans, and roadmaps, and coordinate with stakeholders responsible for execution.
Ensure compliance with applicable laws, rules, regulations, internal policies, standards, and procedures, and provide evidence of adherence.
Lead issues management and remediation in alignment with the Enterprise Issue Management Program, and work with its senior leaders to influence policy and procedures when appropriate.
Develop and support data risk reporting and metrics that effectively reflect and quantify enterprise data risk.
Promote a strong risk culture, proactive risk management, and accountability for remediation across the enterprise.
Perform effective challenge of significant data-risk processes and initiatives in covered areas.
Provide risk advisory to senior partners and stakeholders to strengthen data risk controls, and serve as the EDRO second-line primary contact for data risk in assigned Business Units and Corporate Functions.
Participate in, influence, and lead activities and deliverables supporting regulatory matters planning and remediation.
Demonstrate leadership behaviors aligned with Truist’s purpose, mission, and values.
Lead and conduct independent evaluation of technical data risk mitigants across enterprise data platforms, applications, AI solutions, and data supply chains, including controls for data protection, privacy, access management, encryption, tokenization, masking, retention, storage, deletion, resiliency, lineage, and data quality.
Challenge the design and operating effectiveness of technical controls, including development of risk indicators, monitoring capabilities, control-testing approaches, and measurement frameworks focused on actual risk reduction.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401(k) plan
At least 10 days of vacation during the first year, prorated based on hire date and full-time or part-time status
10 sick days, prorated
Paid holidays
Position- and division-dependent eligibility for a defined benefit pension plan, restricted stock units, and/or deferred compensation plan