Senior Cyber Risk Oversight Executive

Truist; Greensboro (NC); On-site; USD 300,000 - 400,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) plan

Paid vacation & sick leave

Job summary

Truist seeks a Chief Cybersecurity Risk Officer (CCRO) to provide comprehensive risk oversight across the cybersecurity function. You will lead and challenge the CISO, establish cyber risk oversight, and communicate risk to senior management and the Board.

You will integrate cybersecurity risk with enterprise risk, govern risk policies, and guide regulatory interactions. The role emphasizes second line of defense leadership, risk framework development, and cross‑functional collaboration with

Qualifications

• 15+ years of cybersecurity experience in a Category 2/3 Large Financial Institution
• Experience in recruiting, developing, mentoring teams
• Experience with FFIEC, COBIT, NIST, ITIL frameworks
• Excellent leadership and communication with C-suite and board members
• Bachelor’s degree; MBA preferred; professional designations valued

Responsibilities

• Lead enterprise cyber risk oversight as a second line of defense for Truist Protection Services
• Define and communicate Cyber Risk Frameworks and assessment of information security and cyber risk
• Oversee risk reporting and regulatory engagement with regulators and board
• Align cybersecurity risk with business unit risk and third‑party risk management
• Develop and coach risk teammates and promote risk culture across the organization

Skills

Strategic leadership

Executive communication

Risk management

Regulatory knowledge

Team leadership

C-suite collaboration

Cybersecurity risk oversight

Education

Bachelor’s degree in computer science / information systems

MBA preferred

Certifications: CISA, CRISC, CPM

Job description

Truist seeks a Chief Cybersecurity Risk Officer (CCRO) to provide comprehensive risk oversight across the cybersecurity function. You will lead and challenge the CISO, establish cyber risk oversight, and communicate risk to senior management and the Board.

You will integrate cybersecurity risk with enterprise risk, govern risk policies, and guide regulatory interactions. The role emphasizes second line of defense leadership, risk framework development, and cross‑functional collaboration with