Cybersecurity Risk Senior Specialist

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).Regular or Temporary:

Regular Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)
Please review the following job description:

Key contributor to the Truist second-line-of-defense (LoD2) Technology Risk team responsible for independent risk oversight of the Security Defense Risk domains. Partner with Truist Protection Services (TPS) teammates and stakeholders in assigned oversight areas, advise on risk-related topics, effectively challenge through risk programs, and independently evaluate cybersecurity risk in the Truist environment.

ESSENTIAL DUTIES AND RESPONSIBILITIES Following is a summary of the essential functions for this job.  Other duties may be performed, both major and minor, which are not mentioned below.  Specific activities may change from time to time.  
1. Provide independent risk oversight (i.e. LOD2) for Truist Protection Services and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk and other related risks (e.g., operational, compliance) within Enterprise Technology.
2. Serve as a subject matter expert and steward of the Cybersecurity Risk Framework to identify, report and mitigate technology risks, with a focus on cybersecurity defense, detection, incident response, and related security capabilities.
3. Execute independent assessment and oversight of the maturity of technology and adequacy of cybersecurity controls to achieve business outcomes for performance, stability, security and service availability, including cybersecurity detection, investigation, response, and recovery capabilities.
4. Strengthen and sustain proactive risk culture through conducting effective risk focused management and partnership routines with technology teams and internal partners. Interface with senior leaders and key partners across the organization.
5. Review and challenge outcomes of first-line-of-defense risk program execution.
6. Monitor legal, regulatory, compliance and audit matters for assigned Enterprise Technology oversight area(s) and ensures timely action.
7. Lead complex projects that have broad technology and enterprise level impact with implications and/or resource requirements beyond risk management. Provide informal leadership to others and serves as a resource on complex solutions.
8. Comfortable in interdisciplinary, matrix environments. Use strong cybersecurity technical acumen to effectively bridge risk, business, technology, and cybersecurity functions. Pivot quickly between advisory consultant and implementation consultant roles.

QUALIFICATIONS

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1. Bachelor's Degree or an equivalent combination of education and experience.
2. 10+  years of banking, technology, operations or risk management experience.
3. Strong business acumen / knowledge, management experience, problem solving, critical thinking, influencing and decision-making skills.
4. Experience…