Senior Enterprise Data Risk Oversight Manager

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Leads and drives successful execution of the EDRO Coverage and Operating Model including risk advisory, effective challenge and independent risk assessment responsibilities and delivery.
2. Provide inputs into Enterprise Data Management Policy, Enterprise Data Risk Policy and other supporting Standards and Procedures on new laws, rules, and regulations as it relates to data management.
3. Leads and ensures active engagement and collaboration with key senior business partners and stakeholders to ensure effective communication, education and understanding of EDRO Program requirements and expectations as appropriate and to drive and facilitate achievement of common goals and objectives.
4. Operates as a strategic risk advisor and business partner to the EDO and other coverage areas of responsibility while still maintaining and demonstrating 2LOD role independence. Leads and effectively contributes to the execution and delivery of the EDRO strategic plan including the supporting tactical plans/roadmaps as well as the coordination with senior business partners and senior stakeholders who play a role in the execution of the strategy.
5. Ensures all applicable laws, rules, regulations, internal policies, standards, and procedures are being followed and can evidence adherence.
6. Leads and drives effective issues management and remediation execution in alignment with the Enterprise Issue Management (EIM) Program as applicable. Works with the Truist Enterprise Issues Management senior leaders to influence policy and procedures when appropriate.
7. Leads, supports, facilitates, and develops when needed data risk reporting and metrics to effectively reflect and quantify data risk across the enterprise.
8. Plays a strong leadership role in promoting, fostering, influencing, and ensuring a strong Truist risk culture driving proactive risk management and remediation accountability across the enterprise.
9. Performs effective challenge on covered areas for all significant data risk related processes and initiatives.
10. Provides risk advisory to senior partners and stakeholders to strengthen data risk controls when applicable. Operates as the EDRO 2LoD primary point of contract for Data Risk areas within Business Units and/or Corporate Functions.
11. Participates, influences, and leads as appropriate activities and deliverables related to support for regulatory matters planning and remediation.
12. Exhibits leadership behaviors consistent with and in support of the Truist Purpose/Mission/Values.
13. Leads and performs independent evaluation of technical data risk mitigants across enterprise data platforms, applications, AI solutions, and data supply chains, including controls related to data protection, privacy, access management, encryption, tokenization, masking, retention, storage, deletion, resiliency, lineage, and data quality.
14. Provides effective challenge regarding the design and operating effectiveness of technical controls, including development of meaningful risk indicators, monitoring capabilities, control testing approaches, and measurement frameworks that assess actual risk reduction rather than compliance alone.

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Bachelor's degree in technology, Data, Business and/or Finance.
2. Fifteen plus years of senior management experience in banking, technology, operations, risk management and/or regulatory agencies.
3. Ten plus years of data management, governance, analytics, testing and/or risk management experience.
4. Strong experience and understanding of risk and controls framework development, management, and measurement.
5. In depth experiences with Application, Process, Risk and Control mapping in a complex financial data management system.
6. Strong senior leadership and influencing skills with strong business acumen/knowledge, management experience, problem solving, critical thinking, influencing and sound decision-making skills. Demonstrates the ability to effectively prioritize.
7. Excellent interpersonal and communication skills demonstrating the ability to build credibility and trust with all levels of management.
8. Ability to effectively lead and manage a team, including identifying and recruiting talent, managing performance, and making decisions about resource allocation.
9. Functional and technical knowledge of Data Management, Data Analytics and Data Risk and Controls framework across data supply chains.
10. Demonstrated ability to lead and manage effectively in a highly matrixed and complex environment and consistently execute in delivering high quality executive level work products.
11. Has demonstrated strong Change Leader abilities and skills to effectively drive and manage change and navigate through ambiguity.

1. Working knowledge of enterprise data platforms and analytical tools such as Snowflake, SAS, Databricks, or comparable environments, sufficient to credibly evaluate data lineage, transformation logic, access controls, and platform-level risk.
2. Familiarity with cloud-based data architectures and modern data engineering practices, including data lake/warehouse design, API-driven data flows, and automated pipelines, sufficient to assess impacts to data integrity, security, and regulatory compliance.
3. Master's degree in business and/or Technology.
4. Data compliance knowledge/experience regarding applicable laws/rules/ regulations.
5. Experienced in working with third parties (On or Offshore, Vendors, etc.).
6. Familiar with Governance Risk and Compliance platforms, e.g. Archer.
7. Demonstrated experience designing, implementing, overseeing, or assessing technical controls related to data protection, privacy, storage, retention, deletion, resiliency, recovery, and data quality.
8. Deep understanding of common technical mitigants used to manage data risk, including encryption, tokenization, masking, key management, access controls, segmentation, monitoring, data loss prevention, lineage management, reconciliation, validation, and automated control monitoring.
9. Experience evaluating control effectiveness through metrics, monitoring, testing, and risk-based assessments, including identification of residual risk and control limitations.

To comply with the Virginia pay transparency statute and for work locations in Virginia only, the annual base salary for this position is $170,000-$200,000.