Segment Risk Manager - Cybersecurity

Huntington Bank; Columbus (OH); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Huntington Bank in Columbus, OH is seeking a Segment Risk Manager - Cybersecurity to oversee operational and regulatory risk programs for a defined business segment in a hybrid work environment.

You will lead IAM risk oversight, assess controls, coordinate risk assessments, and provide executive reporting on risk, issues, and controls while partnering with audit, risk, and technology teams.

Qualifications

• Bachelor’s degree required.
• 5+ years in Audit, Compliance, Risk Management, or Operational Risk.
• 3+ years supporting Identity and Access Management (IAM).
• 2 years in cybersecurity or related domain.
• 2 years with one or more cloud platforms: AWS, Azure, or GCP.

Responsibilities

• Evaluate control effectiveness and escalate as needed.
• Lead risk identification and challenge across IAM domains.
• Ensure risks and control gaps are escalated and managed.
• Govern issues through lifecycle from ideation to closure.
• Support risk assessments and governance processes.

Skills

Security risk awareness

Regulatory compliance

Senior-level communication

Audit/governance

Education

Bachelor’s degree

Tools

AWS

Azure

GCP

DevOps

Containers

APIs

IAM

SSO/federation

Privileged access management

RCSA

ERM frameworks

Job description

Huntington Bank is seeking a Segment Risk Manager - Cybersecurity to oversee and administer operational and regulatory risk strategy programs for a business segment. This hybrid role in Columbus, OH emphasizes operational and regulatory risk governance, identity and access management risk oversight, issue management, and executive-level reporting across the risk and control portfolio.

In this position, you will evaluate control effectiveness, drive identity and access management risk identification and challenge, and ensure that risks and control gaps are appropriately escalated and managed. You will also support enterprise risk management alignment through structured risk assessments and governance processes.

Responsibilities

• Evaluate the effectiveness of controls and elevate as appropriate.
• Lead risk identification, assessment, and effective challenge across Identity and Access Management, including identity governance and administration, access lifecycle management, authentication and authorization, SSO/federation, and privileged access management.
• Ensure material risks and control gaps are identified, escalated, and managed.
• Manage the governance of issues through their lifecycle, from ideation to validation and closure.
• Execute risk assessments against defined scopes and planned initiatives in alignment with enterprise risk management frameworks.
• Support processes such as Risk and Control Self-Assessment (RCSA), Exception Management, and assigned business governance groups.
• Provide advisory guidance on control design, cybersecurity standards and policies, metrics, and processes to support regulatory and maturity requirements.
• Support executive reporting on the health and status of the risk, issues, and control portfolio.
• Act as a trusted advisor to help navigate ambiguity and provide a risk perspective on new challenges or opportunities.
• Escalate issues requiring senior management attention in a timely manner.
• Work with business segment management to ensure the overall risk function supports strategic goals.
• Collaborate with audit, business segment, and corporate risk partners to address issues using action plans and target dates.
• Maintain awareness of credit risk associated with the assigned business segment.
• Perform other duties as assigned.

Requirements

• Bachelor’s degree.
• Minimum 5 years of experience in Audit, Compliance, Risk Management, or Operational Risk.
• In lieu of a Bachelor’s degree, 4 additional years of segment-specific or risk related experience may be considered.
• 3+ years supporting Identity and Access Management (IAM) processes, procedures, and technologies, including identity governance, access management, authentication, authorization, and privileged access management.
• 2 years of experience in cybersecurity or a related domain.
• 2 years of experience with one or more cloud platforms: AWS, Azure, or GCP.
• 2 years of experience with deployment pipelines, DevOps, containers, and APIs.
• 2 years of experience with threat modeling.
• 2 years of experience governing cybersecurity-related policies, procedures, or standards.
• 2 years of experience with quantitative and qualitative risk assessments.
• Excellent communication skills to negotiate internally, often at a senior level.
• At least 7 years of experience within the financial services industry.
• At least 4 years of experience working at a Category 3 or higher financial institution.
• Certifications such as CISSP, CISM, CISA, GIAC, CIPP/US, or other security/privacy certifications are preferred but not required.
• Organized, responsive, and highly thorough approach to problem-solving.
• Demonstrable cyber risk knowledge from real-world environments and situations.

Technologies

• AWS
• Azure
• GCP
• DevOps
• Containers
• APIs
• Identity and Access Management (IAM)
• SSO/federation
• Privileged access management
• Risk and Control Self-Assessment (RCSA)
• Enterprise risk management frameworks

Workplace and Status

• Exempt status: Yes
• Workplace type: Office
• Location: Columbus, OH (hybrid)

Certain positions outside the branch network may be eligible for a flexible work arrangement. Huntington Bank combines in-office work and work from home, and remote roles may have opportunities to meet in offices for moments that matter; specific arrangements are provided by the hiring team.