Cybersecurity Risk Senior Specialist

Truist; Atlanta (GA); Presencial; USD 185 000 - 230 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401(k) plan

Vacation time

Sick days

Paid holidays

Pension plan

Restricted stock units

Deferred compensation

Resumo da oferta

Truist is seeking an experienced technology risk professional to provide LoD2 oversight for cybersecurity risk across the Enterprise Technology ecosystem. You will partner with Truist Protection Services teammates and business units to identify, assess, and mitigate technology risk, reporting findings to leadership and driving risk-informed decisions.

You will lead complex risk initiatives, align with regulatory expectations, and help strengthen the risk culture while navigating matrix

Qualificações

• Bachelor's degree or equivalent; 10+ years of banking, technology, operations or risk management experience.
• Strong business acumen, problem solving, critical thinking and communication skills.
• Ability to operate independently and navigate ambiguity to deliver value.
• Excellent interpersonal and communication abilities with all management levels.
• Experience organizing and managing complex initiatives; data-driven mindset.
• Proficient with Microsoft Office products.

Responsabilidades

• Provide independent risk oversight (LOD2) for Truist Protection Services and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk.
• Serve as SME and steward of the Cybersecurity Risk Framework to identify, report and mitigate technology risks with focus on cybersecurity defense, detection, incident response, and controls.
• Execute independent assessment and oversight of maturity of technology and adequacy of cybersecurity controls for performance, stability, security and service availability.
• Strengthen proactive risk culture through risk-focused partnerships with technology teams and internal partners; interface with senior leaders.
• Review and challenge outcomes of first-line-of-defense risk program execution.
• Monitor legal, regulatory, compliance and audit matters for assigned Enterprise Technology oversight area.
• Lead complex projects with enterprise impact; provide informal leadership and act as a resource on complex solutions.
• Pivot between advisory and implementation roles in interdisciplinary, matrix environments.

Conhecimentos

Business acumen

Management experience

Problem solving

Critical thinking

Influence & decision-making

Interpersonal communication

Independent work

Project coordination

MS Office

Formação académica

Bachelor's degree or equivalent

Master’s degree in Cybersecurity or related field

Ferramentas

Tableau

RSA Archer

NIST Cybersecurity Framework

Descrição da oferta de emprego

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary

Regular

Language Fluency

English (Required)

Work Shift

1st shift (United States of America)

Job Description

Key contributor to the Truist second-line-of-defense (LoD2) Technology Risk team responsible for independent risk oversight of the Security Defense Risk domains. Partner with Truist Protection Services (TPS) teammates and stakeholders in assigned oversight areas, advise on risk-related topics, effectively challenge through risk programs, and independently evaluate cybersecurity risk in the Truist environment.

Essential Duties And Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Provide independent risk oversight (i.e. LOD2) for Truist Protection Services and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk and other related risks (e.g., operational, compliance) within Enterprise Technology.
• Serve as a subject matter expert and steward of the Cybersecurity Risk Framework to identify, report and mitigate technology risks, with a focus on cybersecurity defense, detection, incident response, and related security capabilities.
• Execute independent assessment and oversight of the maturity of technology and adequacy of cybersecurity controls to achieve business outcomes for performance, stability, security and service availability, including cybersecurity detection, investigation, response, and recovery capabilities.
• Strengthen and sustain proactive risk culture through conducting effective risk focused management and partnership routines with technology teams and internal partners. Interface with senior leaders and key partners across the organization.
• Review and challenge outcomes of first-line-of-defense risk program execution.
• Monitor legal, regulatory, compliance and audit matters for assigned Enterprise Technology oversight area(s) and ensures timely action.
• Lead complex projects that have broad technology and enterprise level impact with implications and/or resource requirements beyond risk management. Provide informal leadership to others and serves as a resource on complex solutions.
• Comfortable in interdisciplinary, matrix environments. Use strong cybersecurity technical acumen to effectively bridge risk, business, technology and cybersecurity functions. Pivot quickly between advisory consultant and implementation consultant roles.

Qualifications

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's Degree or an equivalent combination of education and experience.
• 10+ years of banking, technology, operations or risk management experience.
• Strong business acumen / knowledge, management experience, problem solving, critical thinking, influencing and decision-making skills.
• Experience operating independently and navigating ambiguity to deliver value.
• Excellent interpersonal and communication skills demonstrating the ability to establish credibility with all levels of management effectively.
• Demonstrated ability to organize and manage complex initiatives and deliver high-quality, executive level work products.
• Comfort with data and applying analysis to derive value-add insights.
• Adept with Microsoft Office products.

Preferred Qualifications

• Master’s degree in Cybersecurity, Computer Science, Information Security, Engineering, Risk Management, or related discipline.
• Familiarity with financial services cybersecurity laws, regulations, supervisory guidance, and industry standards (e.g., FFIEC IT Examination Handbook, NIST Cybersecurity Framework, NIST SP 800-61, ISO/IEC 27001, and CIS Critical Security Controls).
• Familiarity with risk measurement approaches including development of Key Risk Indicators and thresholds and associated reporting and analytics tools (e.g. Tableau).
• Familiarity with enterprise Governance Risk and Compliance (eGRC) platforms and tools (e.g., RSA Archer).
• Professional cybersecurity certification such as Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) or another relevant cybersecurity designation.
• Extensive technical cybersecurity experience, preferably within security operations, incident response, threat detection, threat hunting, digital forensics, or cyber incident management.

To comply with the Virginia pay transparency statute and for work locations in Virginia only, The annual base salary for this position is $185,000 - $230,000.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation

All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work