Cybersecurity Lead Architecture Consultant​/Architect

Job Summary

Truist is hiring a Cybersecurity Principal Architect responsible for defining and maintaining cyber security architecture and technology plans with a focus on researching emerging technology, best practices, and applicable regulatory/compliance requirements, then applying them to enable business solutions. The role ensures that security controls are reliable and support business initiatives and future growth through coordination with the Truist architectural community, engineering teams, application delivery services, and other stakeholders.

Acting as a lead subject‑matter expert on cyber capabilities, best practices, and security controls for aligned applications and technology stacks, the initial primary focus will be in Identity and Access Management and Cloud Security domains.

For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration‑related support for this position (including, but not limited to H‑1B, F‑1 OPT, F‑1 STEM OPT, F‑1 CPT, J‑1, TN‑1 or TN‑2, E‑3, O‑1, or future sponsorship for U.S. lawful permanent residence status).

Regular

English (Required)

1st shift (United States of America)

• Lead the planning, creation, and management of security architecture deliverables, including but not limited to requirements, solution designs, patterns, building blocks, target architectures, policies, standards, and guidance for all applicable platforms and environments to influence Truist Protection Services (TPS), Enterprise Technology, and line of business decision making.
• Acts as a thought leader in new technology innovation, incubation, introduction and implementation critical to the TPS roadmap and Truist’s success. Build roadmap for acquiring, integrating, and implementing high‑value technology and processes. Oversee efforts (e.g., proof of concepts) to measure and prove new technology value.
• Lead development of system security context and preliminary system security concept of operations and define baseline system security requirements in accordance with applicable regulations and standards.
• Create and maintain system security context and preliminary system security concept of operations and define baseline system security requirements in accordance with applicable regulations and standards.
• Ensure that all acquired or developed security systems and security architectures integrate with enterprise security architecture.
• Establish strong relationships with key technology stakeholders and create convergence by demonstrating credibility, empathy and expertise on business and technical issues. Facilitate, communicate, collaborate, and persuade others in the definition, adoption and implementation of a coherent architecture.
• Evaluate existing or emerging technologies to consider factors such as cost, security, compatibility and usability and ensure security product life cycles are managed proactively.
• Demonstrate comprehensive experience and skill in Information Security (Info Sec) and cyber security technology and practices necessary to negotiate and persuade technology direction on security principals and tenets such as confidentiality, integrity, availability, authentication and non‑repudiation.
• Perform security reviews, identify gaps in security architecture and develop security risk management plans.

• Bachelor’s degree in Computer Science, Information Technology, or related technical field.
• Minimum of 10 years of experience in enterprise architecture or related technology design roles.
• Deep expertise in architecture frameworks, principles, and best practices.
• Proficient in advanced modeling tools and techniques for system and application architecture.
• Extensive knowledge of regulatory compliance and risk management related to technology architecture.

• Broad knowledge across a wide range of security and technology domains, and deep knowledge/experience in Identity and Access Management (IAM) and securing complex AWS and Azure architectures.
• Understanding of security foundations,…