Strategic Cyber Risk Executive – Board‑level Oversight

Truist; Raleigh (NC); On-site; USD 300,000 - 400,000; Full time

Benefits offered by this job

Medical, dental, vision benefits

401(k) with company match

Paid time off

Job summary

Truist seeks a Chief Cybersecurity Risk Officer (CCRO) to provide comprehensive risk oversight of the cybersecurity organization. This senior executive reports to the CIRO and serves as the risk oversight lead across Cybersecurity, guiding regulatory alignment and strategic risk management at the enterprise level.

The CCRO will independently challenge CISO decisions, define risk frameworks, and elevate significant issues to senior leadership and the Board.

Qualifications

• Fifteen+ years in cybersecurity risk roles within a Category 2 or 3 Large Financial Institution.
• Deep understanding of regulatory requirements for complex financial services organizations.
• Proven ability to lead and coach teams and communicate with C‑suite executives.

Responsibilities

• Strategic Leadership: develop enterprise cyber risk management framework and risk appetite statements.
• Risk Leadership: provide second line of defense oversight for cyber risk across the organization.
• Governance & Oversight: participate in CIRO risk committee and board discussions; oversee supplier risk.
• Risk Assessments: define cyber risk framework and assess maturity of cybersecurity controls.
• Risk Continuous Monitoring: oversee risk monitoring, incident reviews, and remediation efforts.
• Regulatory Engagement Oversight: interface with regulators and external auditors on cyber risk matters.
• Talent Management: lead and develop risk talent; promote training and industry participation.
• Risk Culture: foster enterprise risk awareness across leadership and staff.

Skills

Strategic leadership

Risk leadership

Governance & oversight

Risk assessments

Risk continuous monitoring

Regulatory engagement

Talent management

Risk culture

Education

Bachelor’s degree in computer science, Information Systems, or data/technology related field

MBA preferred

Fifteen+ years in cybersecurity risk within a large financial institution

Tools

FFIEC framework

COBIT/NIST/ITIL familiarity

Job description

Truist seeks a Chief Cybersecurity Risk Officer (CCRO) to provide comprehensive risk oversight of the cybersecurity organization. This senior executive reports to the CIRO and serves as the risk oversight lead across Cybersecurity, guiding regulatory alignment and strategic risk management at the enterprise level.

The CCRO will independently challenge CISO decisions, define risk frameworks, and elevate significant issues to senior leadership and the Board.