Senior Cybersecurity Risk Oversight Leader

KeyBank; Chicago (IL); On-site; USD 96,000 - 181,000; Full time

Job summary

KeyBank seeks a Sr. Cybersecurity Risk Oversight Professional to provide independent oversight and SME to 1st Line of Defense risk teams.

The role focuses on Cybersecurity and Information Security Risk Oversight for the Key Technology Services line and broader enterprise AI risk governance. The position involves collaboration with leaders, evaluating risk across portfolios, and guiding mitigation for evolving cyber and AI-related risks.

Qualifications

• Bachelor's degree in cybersecurity, information systems, computer science, business or related field, or commensurate/relevant degree is required.
• Minimum 8 years industry experience in Cybersecurity Risk, Information Security Risk, Technology Risk or External/Internal Security Audit.
• Practical knowledge of cybersecurity domains such as security operations, cyber defenses, identity and access management, network/cloud security architecture.
• Functional knowledge with AI/ML security risk concepts (e.g., AI governance, data security, adversarial threats).
• Outstanding active listening skills with the ability to synthesize complex information or processes.
• Demonstrated ability to work with internal and external auditors and regulators.
• Ability to think strategically coupled with the ability to independently drive executionto closure.
• Ability to view risk holistically within a dynamic, fast-paced team environment
• In-depth practical knowledge of cybersecurity and technology controls, risk assessments and applicable techniques for implementation of compliance and regulatory requirements.
• Manage workflows and task assignments simultaneously to ensure timely completion of work
• Have an execution-oriented, process efficiency and continuous improvement mindset
• Possessing intellectual curiosity and a passion for seeking to understand
• Proven ability to have, maintain, and establish strong contacts within the industry so as to be aware of current industry issues and practices

Responsibilities

• Evaluate risk and control identification within key processes and perform gap assessments on control coverage as well as first line of defense identification processes.
• Collaborate and independently foster relationships with leaders to gain insights on cybersecurity posture, emerging cyber and AI-related risks and strategic technology initiatives, identifying opportunities to mitigate risk.
• Evaluate and monitor security portfolio, strategic initiatives, including AI adoption and deployments, and new and emerging technologies to ensure alignment with cyber risk appetite and business goals.
• Review cybersecurity processes, risks and controls, and conduct targeted assessments to support effective oversight and compliance with enterprise risk management requirements.
• Provide expert advice on cybersecurity and AI risk management practices, offering practical solutions to mitigate identified risks.
• Analyze and assess cybersecurity and AI-related risks associated with new products or services including third parties.
• Assist with cybersecurity and technology audits and regulatory examinations, ensuring thorough and timely responses to inquiries and findings.
• Escalate and report any significant risk issues and facilitate appropriate corrective actions.
• Perform ongoing monitoring of emerging cyber and AI-related risks and industry and regulatory trends.

Skills

Cybersecurity risk management

Information security risk

Security operations

Identity and access management

AI governance

Regulatory liaison

Strategic thinking

Relationship building

Education

Bachelor's degree in cybersecurity or related field

Tools

Cloud security architecture

Security operations tooling

Job description

KeyBank seeks a Sr. Cybersecurity Risk Oversight Professional to provide independent oversight and SME to 1st Line of Defense risk teams.

The role focuses on Cybersecurity and Information Security Risk Oversight for the Key Technology Services line and broader enterprise AI risk governance. The position involves collaboration with leaders, evaluating risk across portfolios, and guiding mitigation for evolving cyber and AI-related risks.