Director, Cybersecurity Risk Management

Truist is seeking a senior leader to support continued maturation of the Security Governance function within Truist Protection Services (TPS). Reporting to the Head of Security Governance, this role will play a key role in the strategic direction for the management of cyber risks, issues, and controls across TPS to scale governance and accelerate decision‑making. The leader will translate key drivers, regulatory expectations, and emerging threats into a coherent program strategy and operating model, and partner closely with other Security Governance functions, second line Risk, Audit, Business Information Security Officers (BISOs), Technology, Legal, and business stakeholders to strengthen Truist’s cyber risk posture and reduce time‑to‑remediation  ideal candidate has led cybersecurity risk, issue management, and/or controls functions in a large, regulated environment;

can translate technical risk into clear business decisions; and can drive measurable program outcomes through strong governance discipline and modern, technology‑enabled execution.

• Define and execute program strategy, establishing the vision, operating model, and multi‑year roadmap aligned with key drivers, regulatory expectations, enterprise risk appetite, and TPS priorities.
• Own end‑to‑end management of a portfolio of issues—including intake, classification, prioritization, root‑cause analysis, action plan quality, remediation tracking, escalation, and closure validation.
• Drive issue management and mitigation, identifying, documenting, coordinating, and executing issue management and mitigation activities, and partnering with control and process owners to ensure timely, sustainable remediation and reduction of repeat findings.
• Govern controls design and operation, leading the creation, documentation, and ongoing management of cybersecurity controls as applicable—ensuring controls are well‑defined, mapped to applicable frameworks and regulations, testable, and continuously monitored for effectiveness.
• Embed agentic AI and automation, championing a culture of innovation by applying agentic AI, intelligent workflows, and advanced analytics to issue management, control monitoring, evidence collection, and executive reporting—reducing manual effort and accelerating insight.
• Partner across Security Governance, coordinating seamlessly with Process, Risk and Control;
  Policy and Standards Governance and Adherence;
  Assessments;
  Third‑Party Risk; and other Security Governance functions to ensure a consistent, integrated governance experience for TPS.
• Engage the three lines of defense, building strong partnerships and influencing outcomes across first line TPS teams, second line Risk and Compliance, and third line Audit—aligning oversight expectations, strengthening issue management discipline, and reducing residual risk.
• Support regulatory and audit engagements, leading timely, accurate, and well‑evidenced responses to regulatory exams and internal audit activities; ensuring sustainable remediation and strong control evidence.
• Deliver executive‑ready reporting, producing concise, decision‑grade materials for senior leadership and governance committees, highlighting top risks, issue trends, control health, and prioritized actions.
• Build and develop the team, hiring, developing, and retaining a high‑performing team of cybersecurity risk, issue management, and controls professionals; setting clear goals, providing coaching, and fostering a culture of accountability, curiosity, and collaboration.
• Embody "we deliver together," establishing strong cross‑functional working relationships across TPS, Technology, Legal, Procurement, Enterprise Risk, and business stakeholders to drive shared outcomes.

• Bachelor’s degree in Information Technology, Information Security, Engineering, or related field.
• Minimum of 10 years of professional experience in technology governance with progressive management responsibilities.
• Proven experience managing teams and mitigating technology risks at scale.
• Strong knowledge of regulatory requirements and compliance frameworks.
• Expertise in governance…