Technology Risk Specialist; Programs

Location:

Candidates must be located in or willing to self‑relocate to one of the following locations:

• Charlotte, NC
• Richmond, VA
• Atlanta, GA

Truist 'in office' requirement is 5 days per week. No full remote or relocation assistance available at this time.

Individual contributor within Truist’s Second Line of Defense (LoD2) Information Risk organization, responsible for executing key risk programs including RCSA, risk assessments, risk identification, and effective challenge. This role serves as the LoD2 risk representative for Technology, Cyber Security, and Data, advancing the maturity of Truist’s risk programs across these domains. The position focuses on enhancing risk governance, methodology, reporting, and overall program execution to ensure alignment with regulatory expectations and Truist’s risk appetite.

Responsibilities include providing oversight and effective challenge of first‑line risk and control activities while driving consistent, well‑governed risk practices across the enterprise.

• Provide independent risk oversight for Truist Technology and related business units through the identification, mitigation, monitoring, and reporting of operational, technology, and compliance-related risks within Enterprise Technology.
• Communicate and drive the Technology Risk Framework and associated Risk Program Office activities in alignment with Truist corporate risk framework and enterprise risk reduction activities.
• Assess and oversee the maturity of technology controls to achieve business outcomes for performance, stability, security, and service availability.
• Strengthen and sustain proactive risk culture through leadership, influence with teammates and business partners, and effective risk-focused management routines.
• Review and attest to/challenge adequacy of risk assessments of Technology produced by first-line-of-defense Business Unit Risk Management and other risk partners.
• Ensure effectiveness and structure in regulatory engagement practices, including responses out of Enterprise Technology.
• Develop and maintain effective communication channels with Enterprise Technology partners, other risk and control functions, Business Unit (BU) management, and regulatory agencies.
• Drive improved risk measurement and performance monitoring for all Technology Risk domains and Enterprise Technology teams, leveraging tools to monitor and challenge Truist Technology Risk appetite.
• Recruit, develop and retain high-performing teammates, developing their knowledge, skills and abilities directly and indirectly.

For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position. This includes, but is not limited to:

• H-1B
• F-1 OPT
• F-1 STEM OPT
• F-1 CPT
• J-1
• TN-1
• TN-2
• E-3
• O-1
• Future sponsorship for U.S. lawful permanent residence status

• Bachelor's Degree or an equivalent combination of education and experience.
• 12+ years of banking, technology, operations or risk management experience.
• Strong business knowledge, management experience, problem solving and decision-making skills.
• Excellent interpersonal and communication skills demonstrating the ability to establish credibility with all levels of management effectively.
• Adept with Microsoft Office products.

• Proven experience with standard 2
  
  LOD risk oversight programs including RCSA, risk assessment, risk identification, and effective challenge execution and oversight within a financial services setting.
• Familiarity with financial services technology-related laws, rules, regulations, and risk management standards (e.g., FFIEC, COBIT, ITIL).
• Familiarity with risk measurement approaches including development of Key Risk Indicators and thresholds and associated reporting and analytics tools (e.g., Tableau, RSA Archer).
• Demonstrated knowledge in technology risk taxonomy, specifically Cyber & Data.

All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be…