Senior Cybersecurity Operational Risk Officer

KeyBank

. Provide independent second-line oversight and risk management subject matter expertise to first-line business units and Business Risk Teams .

Posted 10/27/2026full-timeUnited StatesSenior💰 $96,000 - $181,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Cybersecurity Risk Management, Information Security, and AI/ML Security Risk, with a strong focus on compliance, regulatory requirements, and strategic technology initiatives. Proven ability to assess and mitigate risks while fostering relationships with stakeholders and managing complex workflows.

Highest-signal resume keywords

Cybersecurity Risk ManagementAI/ML Security Risk ConceptsRisk Assessments and ComplianceCISA, CRISC, CISSP CertificationsProject Management and Agile Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityInformation SecurityRisk ManagementControl AssessmentsIdentity and Access ManagementNetwork Security ArchitectureData SecurityAdversarial ThreatsCyber Defense StrategiesRegulatory Compliance

Soft Skills

Analytical SkillsProblem-SolvingOrganizational SkillsCommunication SkillsInterpersonal Skills

Tools & Technologies

Microsoft OfficeOutlookSharePointArcher GRC

Certifications & Qualifications

CISACRISCCISMCISSPCCSPSSCPCCAK

Industry Keywords

CybersecurityInformation SecurityTechnology RiskExternal/Internal Security AuditAI GovernanceCompliance RequirementsRegulatory AgenciesStrategic PlanningEmerging TechnologiesCyber Risk Appetite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Provide independent second-line oversight and risk management subject matter expertise to first-line business units and Business Risk Teams
Oversee cybersecurity and information security risks for Key Technology Services and enterprise areas managing technology, data, and AI/ML systems
Evaluate risk and control identification and perform gap assessments on control coverage and first-line processes
Build relationships with leaders to assess cybersecurity posture, emerging cyber and AI-related risks, and strategic technology initiatives
Monitor security portfolios, strategic initiatives, AI adoption and deployments, and emerging technologies for alignment with cyber risk appetite and business goals
Review cybersecurity processes, risks, and controls and conduct targeted assessments for enterprise risk management compliance
Advise on cybersecurity and AI risk management practices and mitigation solutions
Assess cybersecurity and AI-related risks associated with new products, services, and third parties
Assist with cybersecurity and technology audits and regulatory examinations
Escalate significant risk issues, report findings, and facilitate corrective actions
Monitor emerging cyber and AI risks and industry and regulatory trends
Travel occasionally, including overnight stays

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, information systems, computer science, business or related field, or commensurate/relevant degree is required
Minimum 8 years industry experience in Cybersecurity Risk, Information Security Risk, Technology Risk or External/Internal Security Audit
Practical knowledge of security operations, cyber defenses, identity and access management, and network/cloud security architecture
Functional knowledge of AI/ML security risk concepts, including AI governance, data security, and adversarial threats
Ability to synthesize complex information or processes
Demonstrated ability to work with internal and external auditors and regulators
Ability to think strategically and independently drive execution to closure
In-depth practical knowledge of cybersecurity and technology controls, risk assessments, and compliance and regulatory requirements
Ability to manage workflows and task assignments simultaneously
Proven ability to establish and maintain strong industry contacts
Applicable certifications such as CISA, CRISC, CET, CGEIT, CISM, CISSP, CCSP, SSCP, CCAK, or cloud provider-specific certifications
Preferred: BS or Masters in Technology or Security related field
Preferred: Current and practical knowledge of Technology and/or Information Security activities, challenges, and workflows
Preferred: Additional industry certifications
Preferred: MBA, Law Degree or other relevant advanced education
Foundational knowledge of Archer GRC preferred
Project management and Agile experience preferred
Demonstrated experience working with regulatory agencies, guidelines and requirements
Experience working/managing projects across multiple functional areas and business partners
Experience with strategic planning/thinking initiatives
Proficient PC skills, including Microsoft Office, Outlook and SharePoint
Strong analytical, research, problem-solving, organizational, communication, and interpersonal skills
Ability to work collaboratively, adapt to changing priorities, and influence others

Benefits

Comp & perks

Base salary range of $96,000.00–$181,000.00 annually
Eligibility for incentive compensation, which may include production, commission, and/or discretionary incentives
Flexible workspace options where roles can be performed effectively in a mobile environment
Equal opportunity employment
Reasonable accommodations for qualified individuals with disabilities or disabled veterans