Cybersecurity Compliance Senior Consultant-Third Party Risk Assessor

Truist Financial - Raleigh, NC

Part-time,Full-time - Mid Level

Raleigh, NC

Credit Intermediation and Related Activities

About the position

The Cybersecurity Compliance Senior Consultant - Third Party Risk Assessor role involves conducting risk assessments of Truist's suppliers to identify and quantify risks within their control environments. This position requires both onsite and remote assessments across various risk domains, including Cyber Security, Technology, and Compliance. The consultant will document assessment results, communicate findings to stakeholders, and ensure alignment with business objectives and regulatory requirements.

Responsibilities

• Conduct onsite and remote risk domain assessments of suppliers' control environments.
• Document results of assessments and review control environments of Truist suppliers.
• Identify gaps and risks within suppliers' environments and acknowledge mitigating controls.
• Collaborate with Truist Supplier and Service Managers to align assessment plans with business objectives.
• Measure and monitor progress to ensure assessment deliverables meet established SLAs.
• Apply understanding of business processes and technologies to ensure compliance with regulatory requirements.

Requirements

• Bachelor's degree in computer science or related field or equivalent education, training, or experience.
• 4-6 years of experience in cybersecurity control assessments, preferably with third-party risk management experience.
• General understanding of risk domains including BTCM, 4th party, BSA/AML, Fraud, Operational, and Compliance.
• Technical understanding of applied enterprise technology management.
• Prior experience in Cyber/Information Security related risk assessments.
• Resourcefulness in multi-tasking and problem-solving with moderate supervision.
• Excellent verbal communication, presentation, and writing skills.
• Strong business analysis and problem-solving skills.

Nice-to-haves

• Knowledge of financial services industry and applicable regulations and standards.
• Technical certifications (e.g., MCSE, CCNA, Network+).
• Security certifications (e.g., CISSP, CCSP, CISM, CRISC).

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment insurance
• Tax-preferred savings accounts
• 401k plan
• Vacation days (minimum of 10 days)
• Sick days (minimum of 10 days)
• Paid holidays
• Defined benefit pension plan (depending on position)
• Restricted stock units (depending on position)
• Deferred compensation plan (depending on position)