Chief Cyber Risk Officer: Security & Risk Oversight

Truist; Atlanta (GA); On-site; USD 300,000 - 400,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401k plan and retirement benefits

Paid time off and holidays

Job summary

Truist seeks a senior executive to serve as Chief Cybersecurity Risk Officer, overseeing cyber risk for the organization and reporting to the CIRO. The role provides independent risk oversight, challenges security initiatives, and communicates risk to the Board.

It requires deep regulatory knowledge and strong leadership across a large financial institution. Responsibilities include governance, risk assessments, monitoring, incident review, and strategic alignment with business objectives,

Qualifications

• Fifteen+ years in cybersecurity risk roles within large financial institutions.
• Experience managing people and coaching/mentoring teams.
• Strong knowledge of FFIEC, COBIT, NIST, ITIL and regulatory expectations.

Responsibilities

• Lead cyber risk oversight for the entire cybersecurity function.
• Provide independent risk assessment, challenge and reporting to senior leadership and board.
• Governance: review risk policies, vendor risk, and regulatory compliance.
• Risk assessments: define cyber risk framework and assess controls maturity.
• Risk monitoring and incident remediation, reporting packages for governance.

Skills

Cyber risk oversight

Leadership of risk teams

Regulatory compliance

Executive communication

Strategic risk management

Vendor risk oversight

Education

Bachelor’s degree in computer science or information systems

MBA preferred

Job description

Truist seeks a senior executive to serve as Chief Cybersecurity Risk Officer, overseeing cyber risk for the organization and reporting to the CIRO. The role provides independent risk oversight, challenges security initiatives, and communicates risk to the Board.

It requires deep regulatory knowledge and strong leadership across a large financial institution. Responsibilities include governance, risk assessments, monitoring, incident review, and strategic alignment with business objectives,