Technology Governance & Risk Leader

Truist; Atlanta (GA); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Health insurance

401k plan

Paid vacation

Paid sick leave

Paid holidays

Job summary

Truist Financial Corporation is seeking an ITARC Governance Lead in the United States to design, govern, and continually improve an enterprise technology asset risk classification methodology. You will partner with Cybersecurity, Operational Resilience, Data Governance, and business units to define risk-based criteria, scoring models, and auditable outcomes across the enterprise.

The role focuses on risk indicators, weighting methodologies, and governance oversight to ensure accuracy and

Qualifications

• Bachelor's degree required in IT/security/engineering or related field.
• 7+ years in technology governance or equivalent.
• Strong knowledge of regulatory requirements and compliance.
• Experience with governance assessment methodologies and control frameworks.

Responsibilities

• Implements and improves technology governance frameworks and procedures.
• Provides reporting on technology risk posture to senior management and regulators.
• Collaborates with cross-functional teams to integrate governance into projects and operations.
• Supports internal and external reporting and may facilitate control testing.
• Monitors emerging technology risks and regulatory changes; adjusts strategies accordingly.
• Manages governance projects and mentors junior professionals and teams.
• Drove risk awareness and compliance culture across technology teams.
• Directs governance assessments and control testing to identify vulnerabilities.

Skills

Technology governance

Regulatory compliance

Risk assessment

Cross-functional collaboration

Education

Bachelor's degree in Information Technology, Information Security, Engineering, or related field

Tools

COBIT

NIST

Job description

Truist Financial Corporation is seeking an ITARC Governance Lead in the United States to design, govern, and continually improve an enterprise technology asset risk classification methodology. You will partner with Cybersecurity, Operational Resilience, Data Governance, and business units to define risk-based criteria, scoring models, and auditable outcomes across the enterprise.

The role focuses on risk indicators, weighting methodologies, and governance oversight to ensure accuracy and