Cybersecurity Manager - Risk and Issue Management

Truist Financial - Charlotte, NC

Part-time,Full-time - Senior

Charlotte, NC

10,001+ employees

Credit Intermediation and Related Activities

About the position

The Cybersecurity Manager - Risk and Issue Management at Truist Bank is responsible for identifying, tracking, resolving, and reporting all information security and cyber risks across the CISO organization. This role involves ensuring compliance with enterprise information risk management policies and standards, driving risk mitigation activities, and coordinating with various teams to manage risks throughout their lifecycle. The ideal candidate will have extensive knowledge of information security functions and technologies, particularly in the banking sector, and experience in building and managing risk and issue management functions.

Responsibilities

• Identify, track, resolve, and report information security and cyber risks across the CISO organization.
• Define and support issue management governance routines to maintain metrics within tolerance.
• Facilitate and coordinate meetings with stakeholders to define remediation plans adhering to Enterprise Risk Management frameworks.
• Provide leadership and support to Information Security team operational functions such as GRC, Cyber Operations, and Identity & Access management.
• Establish Information Security key risk indicators and align them with executive reporting and the bank's risk appetite.
• Support the Security Blueprints process and ensure results from Security Architecture evaluations are managed through appropriate risk management processes.
• Work with various teams to ensure consistency in risk evaluation and documentation of risk rationale and mitigating controls.
• Participate in Process, Risks and Controls evaluations to ensure appropriate controls are documented and tested.
• Drive continuous improvement by utilizing industry-proven frameworks and developing resource capabilities.
• Establish strong collaboration and alignment across teams in Truist.

Requirements

• Bachelor's degree and 6-8 years of experience in systems engineering or administration or equivalent education and work experience.
• Deep knowledge in applied enterprise information security technologies including firewalls, intrusion detection/prevention systems, and encryption.
• Previous experience in leading complex IT projects.

Nice-to-haves

• Master's degree or MBA and 10 years of experience or equivalent education and work experience.
• CISSP, CISM, and/or CISA Certification.
• Banking or financial services experience.
• Broad knowledge of Information Security frameworks and regulations.
• Expertise with information security risk management and industry frameworks such as ITIL, COBIT, NIST CSF.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Disability insurance
• Accidental death and dismemberment insurance
• 401k plan
• Paid holidays
• Vacation days
• Sick days
• Potential for restricted stock units and/or a deferred compensation plan