Truist Senior Technology Risk Officer 

United States, North Carolina, Charlotte 

35974912

Regular or Temporary:

English (Required)

1st shift (United States of America)
Please review the following job description:The primary difference between a Senior Technology Risk Officer and a Technology Risk Officer is based upon scope, complexity and size / volume / impact of the organizations covered. The Senior role has direct enterprise-wide impact and hence these roles require more risk management experience.

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Technology Risk Leadership - Provide independent risk oversight (i.e. second line of defense/LOD2) enterprise-wide for Enterprise Control Functions through the effective identification, mitigation, monitoring and reporting of operational, technology, compliance and strategic risks within the ECFs;

3. Industry engagement- lead engagement of peer institution second line functions to influence the industry build of the tech risk functions;

4. Targeted control testing- lead execution of independent second line testing / evaluations (e.g. Red Team / Penetration Testing); work is typically commissioned by the Board, the CEO and / or the CRO;

5. Value Delivery – Ensure that resources, activities and initiatives are aligned to enable and sustain achievement of business objectives within forecasted spend rates while reducing risks;

7. Independent Challenge of LOD1 assessments - Review and attest to/challenge adequacy of risk assessments (i.e. Risk & Control Self-Assessments, Application Assessments, Change Risk Assessments) produced by BURM;

8. Committee Engagement – Serve as member of the Technology Risk Committee and participate in the Enterprise and Board Risk Committees and the Board Technology Committee, when applicable for Technology Risk related topics;

9. Regulatory Engagement Oversight - Ensure effectiveness and structure in regulatory engagement practices, including responses out of the impacted ECF group;

10. Training and Communication - Encourage and monitor risk education, skills training and adoption of goals to drive improved risk culture and awareness across the enterprise;

11. Policy & Standard Leadership – Engage on ECF Risk policy governance, as well as, policies, standards, procedures owned by areas of oversight. Provide direction and guidance in the development, implementation and communication of policies, procedures and standards. Oversight of multiple enterprise-wide policies;

12. Third Party Management Risk Oversight - Monitor, assess and challenge as appropriate significant third-party and vendor relationships within Enterprise Technology;

13. Cross-Organizational Communication - Develop and maintain effective channels of communication with other BU CROs, control functions, Senior Business Unit (BU) management, as well as regulatory agencies;

15. Participate in applicable mergers and acquisition target evaluation and develop independent risk analyses where needed

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Advanced degree in business or financial-related discipline, or equivalent education and related training

2. Twenty years of experience or equivalent proficiency in managing people with demonstrated high competency in recruiting, developing, and coaching/mentoring

3. Fifteen years of experience in a financial institution (or large corporate equivalent) with emphasis on risk management or equivalent work experience

4. Ten years of large ECF and related technology operations, including extensive knowledge of technology policy, procedures and regulations

5. Knowledge of key technology rules/regulations and technology risk management practices (e.g. Federal Financial Institutions Examination Council (FFIEC), Control Objectives for Information and Related Technology (COBIT), NIST (National Institute of Standards and Technology), Information Technology Infrastructure Library (ITIL)).

6. Strong leadership skills including the ability to lead direct and indirect teammates

7. Excellent communication (verbal and written), presentation and facilitation skills; ability to influence and communicate with impact

8. Experience presenting to Executive Leadership and Board level

9. Superior ability to think critically and strategically

Preferred Qualifications:

1. Twentyyears of experience in a financial institution with emphasis on risk management or equivalent work experience

2. Professional designations such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (Information Systems Audit and Control Association) (CRISC), Certified Project Manager (CPM)

3. Strategic business and financial planning experience

4. Experience with audit processes and techniques