Cybersecurity Manager (Third-party Risk Management) jobs in United States
cer-icon
Apply on Employer Site
company-logo

Truist · 3 days ago

Cybersecurity Manager (Third-party Risk Management)

Truist Bank is a financial institution seeking a Cybersecurity Manager focused on third-party risk management. The role involves overseeing the Cyber Security third-party risk management framework, maintaining standards, and ensuring proper tracking and reporting of cyber risks.

BankingFinanceFinancial Services
check
H1B Sponsor Likelynote

Responsibilities

Enhance and maintain Cyber Third-Party Risk Management standard, policies and procedures
Work closely with Cyber risk partners and Third-Party Risk organizations to ensure cyber risks are properly tracked and reported
Perform Cyber Security third-party risk aggregation and root cause analysis by defining and implementing metrics to ensure appropriate measurement and reporting of risk exposure
Provide regular reporting on Cyber Security Third Party Risk Management and support leadership with risk prioritization and escalation
Ensure Cyber Security requirements/specifications are properly reflected and evaluated through the third-party risk assessment process and appropriate risk rating is assigned based on compensating controls and risk appetite
Analyze findings/deficiencies to ensure appropriate risk rating and risk treatment. Ensure appropriate SMEs are engaged in the decision making (risk acceptance/risk remediation). Escalate to leadership when critical issues are identified
Maintain current understanding of Cyber Security threats, vulnerabilities, and regulatory developments impacting third-party risk
Understand Truist Cyber Security requirements, risk approach, and applicability to Truist Third Parties
Strengthen and sustain proactive risk culture through effective risk-focused management and partnership with risk partners/lines of defense
Serve as a subject matter expert and steward of the Cyber Third-Party Risk Framework (standard requirements, processes, risk criteria) to identify, report and mitigate cyber risks
Drive conversations for appropriate risk treatment with a deep understanding of the risk management processes

Qualification

Cyber Security third-party risk managementCyber Security controlsSOC2 type 2 reportsCISSP CertificationCISA CertificationCRISC CertificationCertified Third-Party Risk ProfessionalBanking experienceContract negotiationTechnical certificationsArcherKY3PSecurity Scorecard

Required

Bachelor's degree and eight years of experience in Cyber Security third-party risk management or performing cyber third-party risk assessments
Deep specialized knowledge on Cyber Security controls and third-party risk management best practices
Deep understanding of SOC2 type 2 reports (scope/coverage, applicability, etc.)

Preferred

Master's degree or MBA and ten years of experience or an equivalent combination of education and work experience
Banking or financial services experience
Experience working with Archer, KY3P and Security Scorecard
Deep understanding of the contracting process (contract negotiation/redlining)
CISSP Certification
Other security certifications: CISA, CRISC
Other technical certifications (e.g. CCNA, RHCE, MCSE, etc.)
Certified Third-Party Risk Professional (CTPRP)

Benefits

Medical
Dental
Vision
Life insurance
Disability
Accidental death and dismemberment
Tax-preferred savings accounts
401k plan
No less than 10 days of vacation
10 sick days
Paid holidays
Defined benefit pension plan
Restricted stock units
Deferred compensation plan

Company

Truist is the sixth-largest commercial bank in the U.S.

H1B Sponsorship

Truist has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (313)
2024 (247)
2023 (288)
2022 (275)
2021 (278)
2020 (270)

Funding

Current Stage
Late Stage
Total Funding
unknown
2021-01-01Seed

Leadership Team

leader-logo
Michael Maguire
Chief Financial Officer
linkedin
leader-logo
James Cordovana
SVP of Cloud Security Enterprise Architect
linkedin
Company data provided by crunchbase