LoD2: Technology Risk Senior Specialist

Truist•Atlanta, GA

4d•$180,000 - $200,000•Onsite

About The Position

The Technology Risk Senior Specialist is a key contributor to Truist’s second-line-of-defense (LoD2) Technology Risk team, providing independent oversight of one or more Technology Risk Framework domains and/or Business Unit Technology areas. The role partners with Enterprise Technology teammates and stakeholders, advises on risk-related topics, challenges risk program outcomes, and independently evaluates technology risk across Truist. The position oversees identification, mitigation, monitoring, and reporting of technology and related risks; stewards the Technology Risk Framework; and assesses technology maturity and control adequacy in support of business performance, stability, security, and service availability. It promotes a proactive risk culture through management and partnership routines, engages with senior leaders, monitors relevant legal, regulatory, compliance, and audit matters, and leads complex projects with broad technology and enterprise impact. The role operates in interdisciplinary, matrixed environments and shifts between advisory and implementation consulting as needed. The position requires working in the office five days per week. Locations within Truist’s footprint are preferred; locations outside the footprint may be considered for remote work. Truist will not provide work visa sponsorship, employment authorization sponsorship, or immigration-related support for this position.

Requirements

Bachelor’s degree or an equivalent combination of education and experience.
At least 10 years of banking, technology, operations, or risk management experience.
Strong business acumen, management experience, problem-solving, critical-thinking, influencing, and decision-making skills.
Ability to operate independently and navigate ambiguity to deliver value.
Excellent interpersonal and communication skills, with the ability to establish credibility with all levels of management.
Demonstrated ability to organize and manage complex initiatives and deliver high-quality, executive-level work products.
Comfort with data and applying analysis to derive useful insights.
Proficiency with Microsoft Office products.

Nice To Haves

Strong expertise in cloud platforms, platform-native services, and third-party services, including implementation maturity, gap analysis, risk identification and remediation, control design, and ongoing monitoring.
Hands-on cloud architecture or engineering experience supporting oversight of cloud environments, CI/CD pipelines, standardized deployment patterns, and automated controls.
Ability to evaluate control effectiveness and capability maturity across key cloud operational risk domains.
Ability to interpret and apply relevant Cloud Security Alliance (CSA), FFIEC, and NIST guidance when reviewing cloud policies, standards, controls, and risk decisions, including requirement alignment, traceability, and supporting evidence.
Experience assessing whether cloud controls are implemented consistently across AWS, Azure, SaaS, containers, CI/CD pipelines, and infrastructure-as-code environments, including control mapping, coverage, exceptions, and supporting evidence.
Experience supporting enterprise cloud transformation initiatives, such as migrations from on-premises environments to cloud, while managing risks in line with the firm’s risk appetite and regulatory expectations.
Solid understanding of Secure SDLC and change management practices in financial services, including controls embedded across development, testing, deployment, and release cycles.
Experience in a second-line-of-defense role in a regulated financial services environment, providing independent risk oversight, effective challenge, and credible advisory support to technology and engineering teams.
Strong communication and influencing skills, including the ability to translate complex technical risks into actionable insights for senior management, risk committees, auditors, and regulators.
Relevant certifications such as AWS Certified Solutions Architect, AWS Certified CloudOps Engineer, Cloud+, CRISC, CGEIT, CISA, CGRC, or similar technology risk credentials.

Responsibilities

Provide independent LoD2 risk oversight and consultation to Truist Business Units by identifying, mitigating, monitoring, and reporting technology and related risks within Enterprise Technology.
Serve as a subject matter expert and steward of the Technology Risk Framework to identify, report, and mitigate technology risks.
Independently assess and oversee the maturity of technology and adequacy of technology controls for business performance, stability, security, and service availability.
Strengthen a proactive risk culture through effective risk-focused management and partnership routines with technology teams and internal partners.
Interface with senior leaders and key partners across the organization.
Review and challenge the results of first-line-of-defense risk program execution.
Monitor legal, regulatory, compliance, and audit matters for assigned Enterprise Technology oversight areas and ensure timely action.
Lead complex projects with broad technology and enterprise impact, including projects with implications or resource requirements beyond risk management.
Provide informal leadership and serve as a resource on complex solutions.
Bridge business and IT functions in interdisciplinary, matrixed environments, shifting between advisory and implementation consulting roles.

Benefits

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401(k) plan
At least 10 days of vacation during the first year, prorated based on hire date and full-time or part-time status
10 sick days, prorated
Paid holidays
Depending on position and division, eligibility may include a defined benefit pension plan, restricted stock units, and/or a deferred compensation plan