Senior Enterprise Data Risk Oversight Manager

Truist•Atlanta, GA

4d•$170,000 - $200,000

About The Position

Provides senior-level risk oversight and insight to support implementation of the second-line-of-defense Enterprise Data Risk Oversight (EDRO) Program across the Enterprise Data Office and other enterprise areas. The role calls for technical depth in data platforms, data architecture, and artificial intelligence, including Generative AI and Agentic AI, to deliver credible oversight of technology-driven data environments and AI use cases. The leader anticipates how emerging technologies affect enterprise risk, turns those insights into oversight strategy, and develops the technical fluency of the EDRO team. The role maintains knowledge of data-related AI/ML technologies, associated risks, and regulatory developments, and translates that knowledge into risk practices, governance improvements, and team capability development. The position evaluates technical data risk mitigants across the data lifecycle, including safeguards for data protection, privacy, use, retention, storage, resiliency, deletion, lineage, quality, and recovery. It assesses how controls are designed, implemented, monitored, and measured, and challenges their effectiveness, limitations, residual risks, and alignment with business and regulatory objectives. Working with the first-line Enterprise Data Office, Corporate Function Data Executive Leaders, Data Stewards, and other senior and executive stakeholders, the role influences and coordinates plans and activities to deliver program priorities. It ensures that resources, expertise, processes, practices, tools, and capabilities are developed and aligned to meet program goals. The role leads EDRO coverage and operating-model execution, provides risk advisory and independent assessment, supports policy and standards development, drives issue remediation and risk reporting, and promotes risk culture while preserving second-line independence.

Requirements

Bachelor’s degree in technology, data, business, and/or finance.
15 or more years of senior management experience in banking, technology, operations, risk management, and/or regulatory agencies.
10 or more years of data management, governance, analytics, testing, and/or risk management experience.
Strong experience and understanding of risk and controls framework development, management, and measurement.
In-depth experience with application, process, risk, and control mapping in a complex financial data management system.
Strong senior leadership and influencing skills, business acumen, management experience, problem-solving, critical-thinking, decision-making, and prioritization skills.
Excellent interpersonal and communication skills, including the ability to build credibility and trust with all levels of management.
Ability to lead and manage a team, identify and recruit talent, manage performance, and make resource-allocation decisions.
Functional and technical knowledge of data management, data analytics, and data risk and controls frameworks across data supply chains.
Demonstrated ability to lead in a highly matrixed, complex environment and consistently deliver high-quality executive-level work products.
Demonstrated change leadership skills, including the ability to drive and manage change and navigate ambiguity.

Nice To Haves

Working knowledge of enterprise data platforms and analytical tools such as Snowflake, SAS, Databricks, or comparable environments, sufficient to evaluate data lineage, transformation logic, access controls, and platform-level risk.
Familiarity with cloud-based data architectures and modern data engineering practices, including data lake and warehouse design, API-driven data flows, and automated pipelines.
Master’s degree in business and/or technology.
Data compliance knowledge or experience regarding applicable laws, rules, and regulations.
Experience working with third parties, including onshore or offshore teams and vendors.
Familiarity with Governance, Risk, and Compliance platforms such as Archer.
Demonstrated experience designing, implementing, overseeing, or assessing technical controls for data protection, privacy, storage, retention, deletion, resiliency, recovery, and data quality.
Deep understanding of technical data risk mitigants, including encryption, tokenization, masking, key management, access controls, segmentation, monitoring, data loss prevention, lineage management, reconciliation, validation, and automated control monitoring.
Experience evaluating control effectiveness using metrics, monitoring, testing, and risk-based assessments, including identifying residual risk and control limitations.

Responsibilities

Lead and drive execution of the EDRO Coverage and Operating Model, including risk advisory, effective challenge, and independent risk assessment.
Provide input to Enterprise Data Management Policy, Enterprise Data Risk Policy, and supporting standards and procedures based on new data-management laws, rules, and regulations.
Engage and collaborate with senior business partners and stakeholders to communicate and explain EDRO Program requirements and expectations and advance shared goals.
Serve as a strategic risk advisor and business partner to the Enterprise Data Office and other covered areas while maintaining second-line-of-defense independence.
Contribute to delivery of the EDRO strategic plan and supporting tactical plans and roadmaps, coordinating with senior partners and stakeholders.
Ensure applicable laws, regulations, internal policies, standards, and procedures are followed and that adherence can be evidenced.
Lead effective issue management and remediation in alignment with the Enterprise Issue Management Program, and work with its senior leaders to influence policy and procedures when appropriate.
Lead, support, and develop data risk reporting and metrics that reflect and quantify enterprise data risk.
Promote a strong risk culture, proactive risk management, and remediation accountability across the enterprise.
Perform effective challenge of significant data-risk-related processes and initiatives in covered areas.
Advise senior partners and stakeholders on strengthening data risk controls and serve as the EDRO second-line primary contact for data risk areas in Business Units and/or Corporate Functions.
Participate in and lead, as appropriate, regulatory matters planning and remediation activities and deliverables.
Demonstrate leadership behaviors consistent with Truist’s purpose, mission, and values.
Lead and perform independent evaluation of technical data risk mitigants across enterprise data platforms, applications, AI solutions, and data supply chains, including controls for data protection, privacy, access management, encryption, tokenization, masking, retention, storage, deletion, resiliency, lineage, and data quality.
Challenge the design and operating effectiveness of technical controls, including the development of risk indicators, monitoring capabilities, control testing approaches, and measurement frameworks that evaluate actual risk reduction.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401(k) plan
At least 10 days of vacation during the first year, prorated as applicable
10 sick days, prorated as applicable
Paid holidays
Depending on position and division, eligibility for a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan