Chief Cybersecurity Risk Officer

Truist

. Provide comprehensive risk oversight of Truist’s cybersecurity organization as the Chief Cybersecurity Risk Officer .

Posted 11/6/2026full-timeUnited StatesLead💰 $300,000 - $400,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity risk management, regulatory compliance, and strategic oversight within financial institutions. Proven ability to lead teams, influence senior leadership, and communicate complex technical concepts effectively.

Highest-signal resume keywords

Cybersecurity Risk ManagementRegulatory ComplianceLeadership and Team DevelopmentRisk Assessment and OversightCommunication with C-Suite Executives

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecurityCyber Risk AssessmentCore Technology InfrastructureCloud OperationsEnterprise ArchitectureRisk Management PracticesTechnology Controls MeasurementAudit ProcessesStrategic Business PlanningCybersecurity Frameworks

Soft Skills

Leadership SkillsVerbal and Written CommunicationPresentation SkillsFacilitation SkillsInfluencing Skills

Certifications & Qualifications

CISACRISCCPM

Industry Keywords

Financial ServicesFederal Reserve RegulationsFDIC RegulationsFFIECCOBITNISTITILCybersecurity MaturityRisk Appetite StatementsTechnology Risk Policies

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Provide comprehensive risk oversight of Truist’s cybersecurity organization as the Chief Cybersecurity Risk Officer
Report to the Chief Risk Information Officer and serve as a critical second line of defense function
Serve as the independent risk oversight leader for all Cybersecurity functions
Provide independent oversight and challenge to the Chief Information Security Officer across all risk types
Establish and manage cyber risk oversight, including independent assessments and continuous monitoring
Advise senior leaders on critical cybersecurity issues affecting internal and external stakeholders
Escalate significant issues and emerging risks and communicate cyber maturity and residual risk to senior management and the Board of Directors
Develop and maintain the enterprise technology management framework, risk appetite statements, key risk indicators, and thresholds for cybersecurity
Evaluate strategic cybersecurity decisions and their impact on the organization’s risk profile
Provide second-line oversight for operational, technology, and compliance risks within Core Technology and Cyber
Challenge first-line self-assessments and integrate cybersecurity risk with business-unit risk, controls, and assessments
Collaborate with other Risk Oversight Officers on comprehensive risk management and prioritization of technology activities
Participate in technology, data, operations, CIRO-led, enterprise, and Board Risk Committees
Review and challenge technology and data risk policies, standards, and procedures
Oversee assessments and monitoring of critical technology vendors and third-party service providers
Ensure compliance with regulatory requirements and supervisory guidance related to cybersecurity risk
Define, communicate, and drive Cyber Risk Frameworks and direct information-security and cyber-risk assessments
Assess cybersecurity maturity and control adequacy against agreed business outcomes
Monitor cybersecurity strategy, operations, project portfolios, development methodologies, and project milestones
Lead reviews of significant cyber incidents and direct remediation of root causes
Identify emerging risks and accelerate reviews of technology policies, standards, business processes, or control assessments
Design recurring cybersecurity risk reporting packages for internal and governance reporting
Serve as the primary risk contact with regulators on cyber-risk matters
Present risk assessments and updates to the Board and external stakeholders
Collaborate with Truist Audit Services and external auditors on cybersecurity reviews
Challenge and validate regulatory remediation actions before closure
Lead, manage, and develop teammates directly and indirectly
Advise senior leadership on cybersecurity talent and resource allocation
Facilitate cybersecurity risk education, skills training, and industry participation
Promote risk-management culture and sustainable business practices across the organization

Requirements

What you’ll need

Bachelor’s degree in computer science, Information Systems, or a data/technology related field
15+ years of progressive experience in cybersecurity-relevant roles within a Category 2 or 3 Large Financial Institution
Deep understanding of regulatory requirements for complex financial services organizations, including Federal Reserve and FDIC regulations
15+ years of experience or equivalent proficiency in managing people, including recruiting, developing, and coaching/mentoring
15+ years of experience in a financial institution with emphasis on risk management or equivalent work experience
Extensive knowledge of information security, cyber risk, core technology infrastructure, cloud operations, and technology operations
Experience leveraging modern tools to measure the effectiveness of technology and cyber controls
Experience with enterprise architecture, reference architectures, and emerging technologies
Knowledge of technology rules, regulations, and risk management practices, including FFIEC, COBIT, NIST, and ITIL
Excellent leadership skills, including leading direct and indirect reports and executive-level leaders
Excellent verbal and written communication, presentation, and facilitation skills
Ability to influence and communicate with C-suite executives and board members
Ability to translate technical concepts for various audiences
Excellence in building and leading high-performing teams
MBA preferred
Bachelor’s degree in finance or business equivalent preferred
Professional designations such as CISA, CRISC, or CPM preferred
Strategic business and financial planning experience preferred
Experience with audit processes and techniques preferred
Exposure to adapting cybersecurity capabilities in a post Mythos threat environment preferred

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
Accidental death and dismemberment coverage
Tax-preferred savings accounts
401k plan
At least 10 days of vacation during the first year, prorated
10 sick days, prorated
Paid holidays
Defined benefit pension plan, depending on position and division
Restricted stock units, depending on position and division
Deferred compensation plan, depending on position and division
Reasonable accommodations for individuals with disabilities