The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

This Sensitive Data Associate role will work with stakeholders across all lines of business and corporate functions data steward teams to further develop and strengthen the Sensitive Data Management (SDM) program within the enterprise. Areas of responsibilities will include but not limited to, internal controls, sensitive data loss prevention, sensitive data discovery, sensitive data classification, and applicable documentation (job aids, governance procedures). NOTE: this is not a traditional Data Analyst role.

ESSENTIAL DUTIES AND RESPONSIBILITIES

Following is a summary of the essential functions for this job.  Other duties may be performed, both major and minor, which are not mentioned below.  Specific activities may change from time to time.  

1.    Identifies and manage existing and emerging risks that stem from business activities and the job role.
2.    Publishes, maintains, and/or interprets moderately complex Sensitive Data Governance (e.g. procedures and job aids).
3.    Performs scanning of sensitive data elements within structured and unstructured data types using industry supported capabilities.
4.    Performs and advises on Sensitive Data and information focused risk assessments of moderately complex projects (e.g. focused on a domain or system with established structure and governance) and new technologies.
5.    Recommends risk treatment options for technical projects and initiatives.
6.    Executes repeatable methods and measurements to discover Sensitive Data  risk and recommends improvements to the process.
7.    Guides and assists process owners in the identification, development, and testing of Sensitive Data controls for risk mitigation effectiveness.
8.    Responds both verbally and in writing to routine inquiries and periodic exams from all lines of defense partners (e.g. legal, compliance, audit, risk).

QUALIFICATIONS
Required Qualifications:

Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
1.    Bachelor’s degree in information security, data management or equivalent education and related training
2.    5 years of related experience in Sensitive Data Security, Information Security, Information Assurance, Risk Management, Audit and/or Information Technology to include accountability for complex tasks and/or projects.
3.    Business acumen and business and social maturity; ability to meet officers of potential targets, promoting image and philosophy of Truist.
4.    Strong communication skills, including writing skills, verbal communication skills and personal presentation skills; ability to create precise targeted communication that creates ease of understanding of complex issues.
5.    Knowledge and demonstrated application of Confidentiality, Integrity and Availability (CIA), Data Management and Least Privilege Principles
6.    Knowledge of a wide range of security technologies, such as data discovery, database security, tokenization platforms, Data Leakage Prevention, data security posture management, Database Monitoring
7.    Ability to adhere strictly to deadlines

Preferred Qualifications:

1. Experience with data scanning tools (e.g. PkWare, Cyera)
2. Background in sensitive data controls to protect PCI, PHI, PII and IP data or information security related fields