Executive Cyber Risk & Resilience Leader

Truist; Raleigh (NC); On-site; USD 300,000 - 400,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

401k plan

Paid time off

Job summary

Truist Financial Corporation seeks a Chief Cybersecurity Risk Officer to provide independent risk oversight of the cybersecurity organization. The role reports to the CIRO and serves as the second line of defense to the CISO, guiding cyber risk governance and strategic risk decisions at the enterprise level.

The incumbent will lead cyber risk oversight across all cybersecurity functions, establish risk frameworks, and communicate maturity and residual risk to senior management and the board.

Qualifications

• 15+ years in cybersecurity within a large financial institution
• Experience leading risk oversight in second line of defense
• Strong knowledge of FFIEC, COBIT, NIST, ITIL and related regulations
• Proven ability to recruit, develop and mentor talent
• Excellent communication and influence with executives and board members

Responsibilities

• Develop and maintain the enterprise cyber risk framework and risk appetite
• Provide independent risk oversight for Cybersecurity across the organization
• Challenge technology risk assessments and ensure alignment with risk appetite
• Lead governance and oversight through risk committees and board interactions
• Oversee monitoring of cyber incidents and remediation efforts
• Design recurring risk reporting packages for cybersecurity leadership and regulators
• Engage regulators and coordinate with internal audit on cybersecurity reviews
• Lead talent management and development within the cybersecurity risk function
• Promote a culture of risk management across the organization

Skills

Leadership

Regulatory knowledge

Risk management

Executive communication

C-suite liaison

Education

Bachelor’s degree in computer science / information systems / data tech

MBA preferred

Job description

Truist Financial Corporation seeks a Chief Cybersecurity Risk Officer to provide independent risk oversight of the cybersecurity organization. The role reports to the CIRO and serves as the second line of defense to the CISO, guiding cyber risk governance and strategic risk decisions at the enterprise level.

The incumbent will lead cyber risk oversight across all cybersecurity functions, establish risk frameworks, and communicate maturity and residual risk to senior management and the board.