Director Technology Risk Management Jobs in Georgia

Key contributor to the Truist second-line-of-defense (LoD2) Technology Risk team responsible for independent risk oversight of one or more Technology Risk Framework domains and/or Business Unit Technology areas. Partner with Enterprise Technology teammates and stakeholders in assigned oversight areas, advise on risk-related topics, effectively challenge through risk programs, and independently evaluate technology risk in the Truist environment. The Technology Risk Senior Specialist – TEMPO Cost & Supplier Management Oversight provides independent LoD2 oversight of TD&O management of suppliers, ensuring the Cost & Supplier Management (CSM) function within TEMPO demonstrates appropriate risk management, governance, monitoring, and reporting across the TD&O supplier portfolio. CSM's scope includes:

• Supplier Portfolio Management (non-strategic suppliers)
• Labor Supplier Management (Fieldglass-based contingent workforce supplier activities)
• Strategic Supplier Management (top strategic non-labor suppliers; classification, business reviews, executive summaries)
• Supplier Operations (purchase order management, credits/commitments/incentives, contract renewal pipeline oversight)
• Supplier Optimization (horizontal opportunities to improve cost/performance across TD&O suppliers)

This role partners with the enterprise Third Party Risk Management (TPRM) team and Risk Type Owners within Information Risk Oversight (IRO) to ensure balanced and coordinated coverage of risks generated or managed by TD&O Cost and Supplier Management.

Essential Duties And Responsibilities

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Provide independent risk oversight (i.e. LOD2) for Truist Technology and related consult to Truist Business Units through the effective identification, mitigation, monitoring and reporting of technology risk and other related risks (e.g., operational, compliance) within Enterprise Technology.
• Serve as a subject matter expert and steward of the Technology Risk Framework to identify, report and mitigate technology risks.
• Execute independent assessment and oversight of the maturity of technology and adequacy of technology controls to achieve business outcomes for performance, stability, security and service availability.
• Strengthen and sustain proactive risk culture through conducting effective risk focused management and partnership routines with technology teams and internal partners. Interface with senior leaders and key partners across the organization.
• Review and challenge outcomes of first-line-of-defense risk program execution.
• Monitor legal, regulatory, compliance and audit matters for assigned Enterprise Technology oversight area(s) and ensures timely action.
• Lead complex projects that have broad technology and enterprise level impact with implications and/or resource requirements beyond risk management. Provide informal leadership to others and serves as a resource on complex solutions.
• Comfortable in interdisciplinary, matrix environments. Use acumen and skills to effectively bridge business and IT functions seamlessly. Pivot quickly between advisory consultant and implementation consultant roles.

Qualifications

Required Qualifications:

• Bachelor's Degree or an equivalent combination of education and experience.
• 10+ years of banking, technology, operations or risk management experience.
• Strong business acumen / knowledge, management experience, problem solving, critical thinking, influencing and decision-making skills.
• Experience operating independently and navigating ambiguity to deliver value.
• Excellent interpersonal and communication skills demonstrating the ability to establish credibility with all levels of management effectively.
• Demonstrated ability to organize and manage complex initiatives and deliver high-quality, executive level work products.
• Comfort with data and applying analysis to derive value-add insights.
• Adept with Microsoft Office products.

Preferred Qualifications:

• Master's degree in Business Administration (MBA) or advanced degree in Business Management, Technology or Finance.
• Familiarity with financial services technology-related laws, rules, regulations, and risk management standards (e.g. Federal Financial Institutions Examination Council (FFIEC), Control Objectives for Information and Related Technology (COBIT), Information Technology Infrastructure Library (ITIL)).
• Familiarity with risk measurement approaches including development of Key Risk Indicators and thresholds and associated reporting and analytics tools (e.g. Tableau).
• Familiarity with enterprise Governance Risk and Compliance (eGRC) platforms and tools (e.g., RSA Archer)
• Professional risk management designations such as Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (Information Systems Audit and Control Association), and/or Project Management certification.
• Advanced expertise with Third-Party risk frameworks and operational practices, including contract provisions, third-party due diligence, vendor assessments, service commitment management, labor and strategic sourcing, cost structures, renewals and other requirements.
• Hands-on familiarity with enterprise third-party risk management policy and procedures and typical divisional expectations.
• Familiarity with supplier/procurement platforms and reporting (e.g., Ariba; Fieldglass).
• Experience evaluating technology and operational vendors and operations.
• Exposure to regulatory, audit, and industry standards impacting third parties, such as Interagency Guidance on Third-Party Relationships Risk Management, SR 23-4, FIL-29-2023, and third-party implications from other regulations for data, cyber security or technology (e.g., GLBA).