Executive Chief Cyber Risk Officer

Truist Financial Corporation; Atlanta (GA); On-site; USD 300,000 - 400,000; Full time

Job summary

Truist is seeking a Chief Cybersecurity Risk Officer (CCRO) to provide comprehensive risk oversight of the cybersecurity organization. The role reports to the CIRO and serves as a key second line of defense, guiding cyber risk management to align with strategic objectives.

The CCRO will lead cyber risk oversight across all cybersecurity functions, set risk appetite, challenge initiatives, and communicate maturity and residual risk to senior management and the Board.

Qualifications

• 15+ years in cybersecurity roles within a Category 2 or 3 Large Financial Institution (LFI).
• Experience managing people with strong leadership and mentoring.
• Extensive knowledge of information security, cyber risk, and regulatory practices (FFIEC, COBIT, NIST, ITIL).
• Excellent leadership and communication skills, with ability to influence C-suite and board members.

Responsibilities

• Lead strategic cyber risk oversight and set risk appetite.
• Provide independent risk oversight for Cybersecurity functions and CCS.
• Challenge risk policies and ensure regulatory alignment across the bank.
• Integrate cyber risk with business unit risk, controls and assessments.
• Collaborate with risk oversight peers to standardize requirements and reporting.
• Serve on CIRO risk committee and participate in Enterprise/Board risk committees.
• Define and drive Cyber Risk Frameworks and metrics, with independent assessments.
• Oversee risk reporting packages for governance and regulatory needs.
• Engage regulators and external auditors on cybersecurity risk matters.
• Mentor and develop Cybersecurity Risk staff and leadership.

Skills

Cybersecurity leadership

Regulatory compliance

Executive communication

People management

Risk management

Strategic thinking

Stakeholder influence

Problem solving

Cyber risk framework

Decision making

Vendor management

Education

Bachelor’s degree in computer science / information systems / data & technology

MBA preferred

Job description

Truist is seeking a Chief Cybersecurity Risk Officer (CCRO) to provide comprehensive risk oversight of the cybersecurity organization. The role reports to the CIRO and serves as a key second line of defense, guiding cyber risk management to align with strategic objectives.

The CCRO will lead cyber risk oversight across all cybersecurity functions, set risk appetite, challenge initiatives, and communicate maturity and residual risk to senior management and the Board.