LoD2: Technology Risk Specialist

Truist; Richmond (VA); On-site; USD 155,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) plan

Paid time off

Job summary

Truist is seeking an experienced risk professional for the second line of defense (LoD2) in Technology Risk. The role oversees risk for multiple Technology Framework domains, partnering with Enterprise Technology to identify, report and mitigate tech risks.

The position requires strong communication with senior stakeholders and a proactive risk culture. The candidate will perform independent assessments of technology maturity, controls, and service availability while collaborating across

Qualifications

• Bachelor's Degree or equivalent combination of education and experience.
• 5+ years of banking, technology, operations or risk management experience.
• Strong business acumen / knowledge, problem solving, critical thinking and decision-making skills.
• Excellent interpersonal and communication skills demonstrating the ability to establish credibility with all levels of management effectively.
• Demonstrated consistent execution and delivery of high-quality work products
• Comfort with data and applying analysis to derive value-add insights
• Adept with Microsoft Office products.

Responsibilities

• Provides independent risk oversight (i.e. second line of defense/LOD2) for Truist Technology and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk and other related risks (e.g., operational, compliance) within Enterprise Technology.
• Serve as a subject matter expert and steward of the Technology Risk Framework to identify, report and mitigate technology risks.
• Execute independent assessment and oversight of the maturity of technology and adequacy of technology controls to achieve business outcomes for performance, stability, security and service availability.
• Strengthen and sustains proactive risk culture through conducting effective risk focused management and partnership routines with technology teams and internal partners.
• Review and challenge outcomes of first-line-of-defense risk program execution.
• Monitor legal, regulatory, compliance and audit matters for assigned Technology oversight area and ensures timely action.
• Contribute to complex projects which may have both technology and enterprise wide impact beyond risk management.
• Comfortable and has demonstrated effectiveness in interdisciplinary, matrix environments.

Skills

5+ years experience

Business acumen

Communication skills

Influencing skills

Data analysis

Problem solving

Decision making

Microsoft Office proficiency

Education

Bachelor's Degree or equivalent

Tools

Microsoft Office

Job description

Regular or Temporary:

Regular

Language Fluency:

English (Required)

Work Shift:

1st shift (United States of America)

LOCATION:

Please note that candidate must be located in one of the following locations:

• Charlotte, NC
• Raleigh, NC
• Richmond, VA *pay transparency below*
• Atlanta, GA

Truist 'in office' requirement is 5 days per week. No full remote or relocation assistance available at this time.

Please review the following job description:

Individual contributor to the Truist second-line-of-defense (LoD2) Technology Risk team responsible for independent risk oversight of one or more Technology Risk Framework domains and/or Business Unit Technology areas. Partner with Enterprise Technology teammates and stakeholders in assigned oversight areas, advise on risk-related topics, effectively challenge through risk programs, and independently evaluate technology risk in the Truist environment.

For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position. This includes, but is not limited to:

• H-1B,
• F-1 OPT
• F-1 STEM OPT
• F-1 CPT
• J-1
• TN-1
• TN-2
• E-3
• O-1
• Future sponsorship for U.S. lawful permanent residence status

Essential Duties And Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Provides independent risk oversight (i.e. second line of defense/LOD2) for Truist Technology and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk and other related risks (e.g., operational, compliance) within Enterprise Technology.
• Serve as a subject matter expert and steward of the Technology Risk Framework to identify, report and mitigate technology risks.
• Execute independent assessment and oversight of the maturity of technology and adequacy of technology controls to achieve business outcomes for performance, stability, security and service availability.
• Strengthen and sustains proactive risk culture through conducting effective risk focused management and partnership routines with technology teams and internal partners.
• Review and challenge outcomes of first-line-of-defense risk program execution.
• Monitor legal, regulatory, compliance and audit matters for assigned Technology oversight area and ensures timely action.
• Contribute to complex projects which may have both technology and enterprise wide impact beyond risk management.
• Comfortable and has demonstrated effectiveness in interdisciplinary, matrix environments.

Required Qualifications

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's Degree or an equivalent combination of education and experience.
• 5+ years of banking, technology, operations or risk management experience.
• Strong business acumen / knowledge, problem solving, critical thinking and decision-making skills.
• Excellent interpersonal and communication skills demonstrating the ability to establish credibility with all levels of management effectively. Demonstrated effective influencing skills.
• Demonstrated consistent execution and delivery of high-quality work products
• Comfort with data and applying analysis to derive value-add insights
• Adept with Microsoft Office products.

Preferred Qualifications

• Expertise in hosting platforms (on-premise and cloud, open systems, mainframe), IT operations, and/or shared infrastructure (DNS, certificate management, network, database) with hands-on knowledge, architecture, and/or engineering experience, including assessment of inherent and residual risk, control design, and ongoing monitoring.
• Demonstrated understanding of both application, platform, operations, and/or infrastructure risk in complex, distributed environments.
• Experience supporting enterprise transformation initiatives, ensuring risks are identified, managed, and aligned with the firm’s risk appetite and regulatory expectations.
• Hands‑on experience with platform, server, operations, and/or shared infrastructure architecture or engineering enabling effective oversight and/or implementation of controls.
• Ability to evaluate control effectiveness and capability maturity across key operational domains (cloud, mainframe, Operations, shared infrastructure).
• Experience evaluating operational resilience, service availability, redundancy, recoverability, failover capabilities, and single points of failure across critical technology infrastructure.
• Experience reviewing major technology incidents, root cause analyses, corrective actions, and recurring control weaknesses to identify systemic risk themes and provide effective challenge.
• Experience assessing technology audit findings, remediation plans, issue-management activities, and control sustainability within a regulated environment.
• Strong communication and influencing skills, with the ability to translate complex technical risks into clear, actionable insights for technology and engineering teams.
• Relevant certifications preferred, such as:
• Network+, CCNA, etc.
• CRISC, CGEIT

To comply with the Virginia pay transparency statute and for work locations in Virginia only, the annual base salary for this position is: $155, 000 - $170,000K

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation:

All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace. EEO is the Law E-Verify IER Right to Work