Strategic Cyber Risk & Oversight Leader

Truist; Charlotte (NC); On-site; USD 300,000 - 400,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) plan

Paid vacation & sick days

Job summary

Truist in Charlotte, NC seeks a Chief Cybersecurity Risk Officer (CCRO) to provide strategic risk oversight of the cybersecurity organization. Reporting to the CIRO, this executive leads second-line risk management and aligns cyber risk with business objectives.

Key duties include establishing cyber risk frameworks, independent assessments, board-level communication, regulatory liaison, and talent development.

Qualifications

• Bachelor's degree or higher in a relevant field and MBA preferred.
• 15+ years in cybersecurity within a large financial institution with regulatory experience.
• Proven leadership and ability to manage senior teams and communicate with the Board.

Responsibilities

• Develop and maintain enterprise cyber risk oversight framework and risk appetite.
• Provide independent assessments and challenge cyber initiatives to ensure risk alignment.
• Communicate cyber risk maturity and residual risk to senior management and the Board.
• Lead governance activities with risk committees and coordinate with CISO and TPS.
• Mentor and develop Risk Oversight teammates and ensure efficient risk reporting.

Skills

Strategic leadership

Independent risk oversight

Regulatory knowledge

Leadership and people management

Communication with executive

Information security

Risk framework development

Regulatory compliance

Cyber risk governance

Education

Bachelor's degree in computer science, information systems, or data/technology related field

MBA preferred

Job description

Truist in Charlotte, NC seeks a Chief Cybersecurity Risk Officer (CCRO) to provide strategic risk oversight of the cybersecurity organization. Reporting to the CIRO, this executive leads second-line risk management and aligns cyber risk with business objectives.

Key duties include establishing cyber risk frameworks, independent assessments, board-level communication, regulatory liaison, and talent development.