The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.Need Help? (https://www.brainshark.com/bbandt/careers-site-faq)If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (careers@truist.com?subject=Accommodation%20request)(accommodation requests only; other inquiries won't receive a response).Regular or Temporary:RegularLanguage Fluency: English (Required)Work Shift:1st shift (United States of America)Please review the following job description:This position reports directly to the Truist CISO and will be responsible for the execution of all Information Security programs and projects. The position will be responsible for the planning, organizing and implementation of large, complex, strategic programs and projects. These are typically highly visible initiatives with significant impact on Cyber Security and ranging across multiple disciplines, businesses, and/or organizations. S/he is responsible for advancing the organizational strategic and business objectives through the alignment and integration of all programs and projects under their purview, and the coordinated management of all Program and Project Managers. This role will establish a project management and delivery framework and develop the functions and team in alignment with the IT Transformation Office. The position will work closely with the CISO(s), Information Security Managers, Infrastructure, IT and Business teams to manage a portfolio of projects though the full lifecycle including requirements, design, development, testing and implementation. The ideal candidate will have a broad knowledge of Information Security functions and technologies (including digital/cloud) as well as prior experience building and running an Information Security Delivery or Project Management function in the US for a large bank with merger/acquisition transformational change.ESSENTIAL DUTIES AND RESPONSIBILITIESFollowing is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.Primary Roles & Responsibilities
Define and implement the Information Security project delivery framework, target operating model and processes that align to and are integrated with Truist’s IT Transformation Office. This includes documenting policies, processes and procedures (playbooks).
Build and manage a portfolio of projects, working with the CISO(s), Information Security Managers, Infrastructure and CIO teams to ensure alignment with Program strategy and commitment to scope, budgets a timelines.
Actively manage the delivery of all projects to ensure they are implemented effectively and in a timely manner and on budget.
Identify, track and manage project risks and resolve blocking issues to produce successful outcomes.
Build the Information Security Delivery organization, including implementing resource and hiring plans, performing regular skill assessments and training/certifications, and recruiting/hiring/developing talent in key positions.
Motivate and manage a team of cross-functional performers from different job families and organizations and foster a fast-paced and flexible team culture, encouraging and rewarding associates for engaging beyond their job description to get work done.
Provide program and project delivery leadership and support to the Information Security team operational functions e.g. GRC, Cyber Operations, Cyber Protection, Identity & Access management.
Develop strategic partnerships with consulting and staff augmentation companies that can provide cybersecurity resources to rapidly mature the Program and meet deliverables.
Establish a project review process with the CISO Management Team and stakeholders to ensure projects have visibility, accountability is enforced, progress is tracked, and issues are addressed.
Provide detailed status reporting on all projects to the CISO Management team, stakeholders on a weekly basis, and to Executive Management and Regulators as needed.
Drive continuous improvement by utilizing industry-proven frameworks/methodologies, collecting feedback and metrics (quality, delivery rate, etc.) and developing resource capabilities.
Establish strong collaboration, working partnerships and alignment across teams in Truist. Develop a strong “we deliver together” culture.
Support the CISO liaising with Regulators and Internal Audit in exams and other matters related to Information Security Delivery.
QUALIFICATIONSRequired Qualifications:The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
BS IT/ Engineer, Computer Science, or BS Technical.
25 + years professional experience executing large scale multiple million-dollar programs in top 5 USA Banks.
20+ years project management experience leading complex projects and budgets greater than $100M.
7+ years’ experience in US Regulatory programs in top 10 USA Banks, delivering regulatory remediations programs and presenting to US regulators (FRBB or OCC).
5+ years’ experience in banking with Information Security, preferably within a merger/acquisition environment with significant transformational change with people, process and technology.
3+ years’ experience with digital banking deployed on public cloud platforms and leveraging Artificial Intelligence technologies.
Manage 100+ experts from Global vendors to support Regulatory remediations across Cloud Infrastructure, Info Security, Financial Applications, Platform Operations, and Governance, Risk & Compliance.
Hand on expertise with project methodologies and best practices, both waterfall and agile.
Broad knowledge of Information Security frameworks (e.g. NIST, FFIEC), regulations (SOX, GLBA, NYDFS), functions (Anticipate, Protect, Detect, Respond) and cyber controls.
Expertise with information security project management, portfolio management, working across IT and Business functions and with Second and Third lines of Defense, and Regulators.
Demonstrates strong relationship management skills. Proven ability to quickly build trust and rapport with others in order to structure problems, build consensus, and negotiate agreements.
Proven ability to manage large, deadline-driven projects in a way that reduces risk, ensures predictable results, meets or exceeds its timeline.
Thrives in a fast-paced environment, can think and act both tactically and strategically.
Exhibits high degree of creativity, self-motivation, and commitment to tasks.
Ability to create a strong network of relationships among peers, internal partners, external constituencies and decision makers to deliver end products.
Experience preparing materials for and comfortable presenting to executive management.
Excellent written and oral communication skills.
Strong coordination, influencing and negotiation skills.
Excellent risk-based judgement and decision making
Passionate about building world-class Information Security programs.
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site (https://benefits.truist.com/). Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.Truist supports a diverse workforce and is an Equal Opportunity Employer that does not discriminate against individuals on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status or other classification protected by law. Truist is a Drug Free Workplace.EEO is the Law (https://www.eeoc.gov/sites/default/files/2022-10/EEOCKnowYourRightsscreenreader1020.pdf)Pay Transparency Nondiscrimination Provision (https://www.dol.gov/sites/dolgov/files/OFCCP/pdf/pay-transp%20EnglishformattedESQA508c.pdf)E-Verify (https://e-verify.uscis.gov/web/media/resourcesContents/E-VerifyParticipationPosterES.pdf)
