Truist Corporate Cyber Security GRC Operations Manager in Raleigh, North Carolina
Req ID: R0027157
Specific information related to the position is outlined below. To apply, click on the button above. You will be required to create an account (or sign in with an existing account). Your account will provide you access to your application information.Need Help?
Should you have a disability and need assistance with the application process, please request a reasonable accommodation by emailing Accessibilityor by calling 877-891-2510. This email inbox is monitored for reasonable accommodation requests only. Any other correspondence will not receive a response.
Regular or Temporary: Regular Language Fluency: English (Required) Work Shift: 1st shift (United States of America)
Please review the following job description:
Provide management and strategic direction for multiple team members responsible for the design, development, installation and deployment of enterprise information security/cyber security technologies, programs, policies and services. Ensure information security/cyber security GRC activities conform to departmental standards, strategic Corporate Cyber Security (CCS) directives and regulatory requirements. Partner with Cyber security leadership, peer groups and others to develop and implement technology-based solutions that satisfy complex business requirements and protect the enterprise through provision of cutting edge security solutions. Ensure that all information security technology meets internal technical standards for integration and support. Manage the ongoing skill development of Information/Cyber Security teams to ensure they are able to efficiently execute on CCS initiatives. Foster and maintain productive relationships with internal and external clients and across all risk functions.
Essential Duties and Responsibilities: Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.
Provide senior leadership and supervision to an organizational unit within CCS. Ensure internal compliance to process and standards. Understand and communicate strategic direction to associates and line of business LOB clients.
Partner across Enterprise Technology with key technology owners to socialize, develop and implement key CCS initiatives requiring their support.
Represent CCS when working with TRUIST Business Partners to understand business problems representing enterprise security challenges and providing solutions to those problems that enable business while protecting the enterprise.
Provide leadership and guidance in the planning of corporate, client and internal information security technology projects. Work with senior management to ensure appropriate staffing is available to complete initiatives/projects. Identify and execute on opportunities to leverage alternative staffing models where appropriate to gain efficiencies (i.e. offshoring).
Participate in the development and facilitate the quality assurance of KPI/KRI metrics related to information security technologies and initiatives. Understand and communicate strategic direction to peers, subordinates, clients and vendors.
Manage the translation of strategic direction into efficient, effective and supportable solutions ensuring success while maintaining compliance to internal processes and policies.
Facilitate incident response client and regulatory communications and reporting to ensure that the regulatory and legal requirements are met.
Development and Facilitation of Cyber Governance, Risk, and Compliance Executive Reporting and presentations.
Facilitation of the Issues Management Process for CCS including oversight and tracking of all Issues owned or related to CCS.
Provide reporting to staff, colleagues, senior management and clients on a regular basis to ensure all relative and critical information is clearly and expeditiously shared.
Plan, develop and monitor departmental budget in accordance with guidelines as established by Bank management, Operations Division management and Corporate Information Security management. Administer compliance to meet budgetary goals and negotiate changes as required to support Bank objectives.
Responsible for assigned personnel regarding employment, career development, performance evaluations, salary recommendations, promotions, transfers and terminations within established policies and guidelines.
Review technical and business processes, standards and procedures making recommendations for continuous improvement.
Provide oversight on the team efforts to ensure CCS and IT Services’ Standards and Processes and “best practices” are followed. Required Skills and Competencies: The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Bachelor's degree in business administration, technology related field or equivalent education and related training.
Clear ability to express complex multidisciplinary technical and business concepts in terms that are understandable to all levels of Lines of Business and corporate management both verbally and in writing.
Previous experience as a SOX, HIPAA, GLBA, PCI et.al auditor and/or assessor with familiarity of regulatory reports on compliance.
Previous experience with lean process improvement.
Previous experience with metrics analysis and definition.
Previous experience with Project Management
Previous experience with Risk and Issue Management
Previous experience with Incident Management
Previous experience with executive level reporting.
Aptitude to understand and adapt to newer technologies.
A grounded understanding of applied enterprise information security technologies.
Demonstrate a consistent history of delivering on commitments.
Demonstrate critical thinking and problem solving skills.
Able to work independently with limited supervision.
Excellent communication skills, both written and verbal, to both business and technology audiences.
Ability to travel, occasionally overnight. Desired Skills:
Five years of demonstrated progressive experience in Information/Cyber Security.
Prior experience with regulatory reporting.
At least one of the following certifications or equivalent experience: GCFA, GCIH, GCIA, GPEN, CEH, CISSP, CISM, CCNA and/or CISA certification.
Knowledge of financial services industry and all applicable regulations and industry standards. Truist supports a diverse workforce and is an Equal Opportunity Employer who does not discriminate against individuals on the basis of race, gender, color, religion, national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. Drug Free Workplace. Thank you for your interest in Truist! BB&T and SunTrust have come together in a transformational merger of equals to create Truist, the premier financial organization in the country. You may notice references to our legacy company names, BB&T and SunTrust, in places throughout this site. All such references should be understood to refer to Truist moving forward while we continue to transition to the Truist name. EEO is the Law Pay Transparency Nondiscrimination Provision E-Verify
Thank you for your interest in Truist! BB&T and SunTrust have come together in a transformational merger of equals to create Truist, the premier financial organization in the country. You may notice references to our legacy company names, BB&T and SunTrust, in places throughout this site. All such references should be understood to refer to Truist moving forward while we continue to transition to the Truist name.
© 2017 SunTrust Banks, Inc. All rights reserved.
SunTrust is federally registered service marks of SunTrust Banks, Inc.