The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Individual contributor within Truist’s Second Line of Defense (LoD2) Information Risk organization, responsible for executing key risk programs including RCSA, risk assessments, risk identification, operational loss events, scenario analysis, and effective challenge. This role serves as the LoD2 risk representative for Technology, Cyber Security, AI, and Data, advancing the maturity of Truist’s risk programs across these domains. The position focuses on enhancing risk governance, methodology, reporting, and overall program execution to ensure alignment with regulatory expectations and Truist’s risk appetite.

***For this opportunity, Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position. This includes, but is not limited to:

• H-1B,

• F-1 OPT

• F-1 STEM OPT

• F-1 CPT

• J-1

• TN-1

• TN-2

• E-3

• O-1

• Future sponsorship for U.S. lawful permanent residence status

LOCATION:

Please note that candidate must be located in the following location:

• Charlotte, NC

Truist 'in office' requirement is 5 days per week. No full remote or relocation assistance available at this time.

JOB SUMMARY

Individual contributor within Truist’s Second Line of Defense (LoD2) Information Risk organization, responsible for executing key risk programs including: RCSA, risk assessments, risk identification, and effective challenge. This role serves as the LoD2 risk representative for Technology, Cyber Security, and Data, advancing the maturity of Truist’s risk programs across these domains.  The position focuses on enhancing risk governance, methodology, reporting, and overall program execution to ensure alignment with regulatory expectations and Truist’s risk appetite. Responsibilities include providing oversight and effective challenge of first-line risk and control activities while driving consistent, well governed risk practices across the enterprise.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job.  Other duties may be performed, both major and minor, which are not mentioned below.  Specific activities may change from time to time.  

1. Provides independent risk oversight (i.e. second line of defense/LOD2) for Truist Technology and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk and other related risks (e.g., operational, compliance) within Enterprise Technology.

2. Serve as a subject matter expert and steward of the Technology Risk Framework to identify, report and mitigate technology risks.

3. Execute independent assessment and oversight of the maturity of technology and adequacy of technology controls to achieve business outcomes for performance, stability, security and service availability.

4. Strengthen and sustains proactive risk culture through conducting effective risk focused management and partnership routines with technology teams and internal partners.

5. Review and challenge outcomes of first-line-of-defense risk program execution.

6. Monitor legal, regulatory, compliance and audit matters for assigned Technology oversight area and ensures timely action.

7. Contribute to complex projects which may have both technology and enter