Head of Security Delivery

Head of Security Delivery

Requirements

• BS IT/ Engineer, Computer Science, or BS Technical.
• 25 + years professional experience executing large scale multiple million-dollar programs in top 5 USA Banks.
• 20+ years project management experience leading complex projects and budgets greater than $100M.
• 7+ years’ experience in US Regulatory programs in top 10 USA Banks, delivering regulatory remediations programs and presenting to US regulators (FRBB or OCC).
• 5+ years’ experience in banking with Information Security, preferably within a merger/acquisition environment with significant transformational change with people, process and technology.
• 3+ years’ experience with digital banking deployed on public cloud platforms and leveraging Artificial Intelligence technologies.
• Manage 100+ experts from Global vendors to support Regulatory remediations across Cloud Infrastructure, Info Security, Financial Applications, Platform Operations, and Governance, Risk & Compliance.
• Hand on expertise with project methodologies and best practices, both waterfall and agile.
• Broad knowledge of Information Security frameworks (e.g. NIST, FFIEC), regulations (SOX, GLBA, NYDFS), functions (Anticipate, Protect, Detect, Respond) and cyber controls.
• Expertise with information security project management, portfolio management, working across IT and Business functions and with Second and Third lines of Defense, and Regulators.
• Demonstrates strong relationship management skills. Proven ability to quickly build trust and rapport with others in order to structure problems, build consensus, and negotiate agreements.
• Proven ability to manage large, deadline-driven projects in a way that reduces risk, ensures predictable results, meets or exceeds its timeline.
• Thrives in a fast-paced environment, can think and act both tactically and strategically.
• Exhibits high degree of creativity, self-motivation, and commitment to tasks.
• Ability to create a strong network of relationships among peers, internal partners, external constituencies and decision makers to deliver end products.
• Experience preparing materials for and comfortable presenting to executive management.
• Excellent written and oral communication skills.
• Strong coordination, influencing and negotiation skills.
• Excellent risk-based judgement and decision making
• Passionate about building world-class Information Security programs.

Responsibilities

• Define and implement the Information Security project delivery framework, target operating model and processes that align to and are integrated with Truist’s IT Transformation Office. This includes documenting policies, processes and procedures (playbooks).
• Build and manage a portfolio of projects, working with the CISO(s), Information Security Managers, Infrastructure and CIO teams to ensure alignment with Program strategy and commitment to scope, budgets a timelines.
• Actively manage the delivery of all projects to ensure they are implemented effectively and in a timely manner and on budget.
• Identify, track and manage project risks and resolve blocking issues to produce successful outcomes.
• Build the Information Security Delivery organization, including implementing resource and hiring plans, performing regular skill assessments and training/certifications, and recruiting/hiring/developing talent in key positions.
• Motivate and manage a team of cross-functional performers from different job families and organizations and foster a fast-paced and flexible team culture, encouraging and rewarding associates for engaging beyond their job description to get work done.
• Provide program and project delivery leadership and support to the Information Security team operational functions e.g. GRC, Cyber Operations, Cyber Protection, Identity & Access management.
• Develop strategic partnerships with consulting and staff augmentation companies that can provide cybersecurity resources to rapidly mature the Program and meet deliverables.
• Establish a project review process with the CISO Management Team and stakeholders to ensure projects have visibility, accountability is enforced, progress is tracked, and issues are addressed.
• Provide detailed status reporting on all projects to the CISO Management team, stakeholders on a weekly basis, and to Executive Management and Regulators as needed.
• Drive continuous improvement by utilizing industry-proven frameworks/methodologies, collecting feedback and metrics (quality, delivery rate, etc.) and developing resource capabilities.
• Establish strong collaboration, working partnerships and alignment across teams in Truist. Develop a strong ‘we deliver together’ culture.
• Support the CISO liaising with Regulators and Internal Audit in exams and other matters related to Information Security Delivery.

Preferred Qualifications

No preferred qualifications provided.