The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

The Director of Threat Remediation & Prevention will lead and mature Truist’s centralized security remediation and prevention programs. This executive-level role is responsible for unifying vulnerability and threat remediation workflows into a single system of record and governance model, enabling proactive, predictive, and preventative security operations across the enterprise. The ideal candidate will demonstrate the ability to independently develop and execute new programs and processes, and influence change across large, complex organizations—particularly in regulated cybersecurity environments.

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

Automated Vulnerability Remediation

• Own and govern enterprise SLAs for vulnerability triage, remediation, and verification.

• Design and implement standardized automated workflows in ServiceNow Vulnerability Response (VR).

• Maintain dashboards and executive reporting on MTTR, SLA adherence, and risk reduction.

• Integrate remediation workflows with asset inventories, patch/configuration/change management systems.

• Ensure regulatory and policy compliance in remediation processes.

Complex Threat Remediation Governance

• Lead multi-stakeholder remediation workflows for threat assessments, intelligence, and post-incident findings.

• Develop and enforce playbooks, escalation paths, and governance gates for high-risk findings.

• Coordinate with IT, Engineering, Development, and Risk/Compliance teams to ensure secure and verifiable remediation.

• Establish program-level metrics and drive continuous improvement through post-mortems and trend analysis.

Proactive Threat Prevention & Security Culture

• Architect and lead a company-wide threat prevention program focused on proactive controls and education.

• Champion secure-by-design principles and threat awareness across product and business teams.

• Translate threat intelligence into actionable guidance for operations and business decisions.

• Partner with Communications, HR, and Leadership to embed a culture of security ownership.

Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree or equivalent

• 15 years’ technical experience working in the identity and access management control function

• 10 years’ experience as a manager

• 10 yeas’ experience in operational planning and execution 

• 10 years managing simple and structured work

• 10 years managing complex and unstructured work

• 10 years’ experience leading diverse teams, such as teammates, contract workers, onshore, offshore resources, and/or managed services 

• 5 years’ experience and expert-level technical knowledge of product knowledge and processes for specific IAM areas (e.g., Active directory, RACF, Idaptive, CyberArk, PRIVA, Oracle OIM, Persistent Ignite)

• 10 years’ experience and basic functional knowledge of tools and processes for the broader IAM capabi