leading a highly complex, high-risk, critical, and broad-reaching capability
identify, inventory, communicate, monitor, mitigate and evidence solutions for IAM risk
align with IAM-wide priorities that define ‘our what’
hold teams accountable and provide feedback
take a Truist-wide approach to owning and resolving challenges
coach-up, performance manage, develop, and reward top performers/visibility
establish and cascade a predictable schedule for team engagement
consistently seek ways to get better
manage a team of 5 to 7 direct report teammates and contract workers
hiring, coaching, terminations, disciplinary action, and performance reviews
oversee operational and tactical plans in support of business objectives
develop cross-departmental business cases to solve problems by making technical and financial tradeoffs
design and implement the governance, risk, and compliance strategy on time and within budget
improve the user experience and reduce the turnover of critical resources
engage with stakeholders to make them aware and willing to adopt our solutions

Bachelor’s degree or equivalent
15 years’ technical experience working in the GRC control function
10 years’ experience as a manager
10 years’ experience in operational planning, tactical planning, and execution
10 years managing simple and structured work
10 years managing complex and unstructured work
10 years’ experience leading diverse teams
5 years’ experience and expert-level technical knowledge of product knowledge and processes for specific IAM areas (e.g., Active directory, RACF, Idaptive, CyberArk, PRIVA, Oracle OIM, Persistent Ignite)
10 years’ experience and basic functional knowledge of tools and processes for the broader IAM capability
7 years’ experience and expert-level strength in soft skills and interpersonal communications
10 years’ technical experience working for a top 10 US bank
10 years’ experience collaborating with the following functions: a) infrastructure b) application development c) application support d) business unit risk management e) technology risk f) audit and g) external auditors
10 years’ experience collaborating with the following peer functions in corporate cyber security
10 years’ experience managing the remediation of regulatory matters and internal findings
10 years’ experience in strategic planning and applying industry best practices to operations (NIST, FFIEC)

Cybersecurity Process Control and Effectiveness Director – Cyber Maturity Assessment Lead

Key skills