Chief Data Risk Officer

This is a fully remote position, open to applicants in North Carolina, +1 more state.

📋 Description

• Develop and oversee an independent oversight and effective challenge function for the management of Enterprise Data and Artificial Intelligence.

• Provide second-line-of-defense oversight for data management practices across the Enterprise Data Office, Artificial Intelligence, Enterprise Data Operations & Delivery, and Line of Business & Corporate Functions Data offices.

• Report directly to the Chief Information Risk Officer.

• Establish and manage the enterprise data risk strategy, which includes Truist Data Risk Policies, AI Oversight Policies, Data Framework, and Assessment.

• Act as Chief Data and AI Risk Officer, providing independent oversight and challenge to the Chief Data Office and the Enterprise AI and Data team.

• Offer advice to senior leaders on critical technology matters impacting internal and external stakeholders.

• Escalate significant issues and emerging risks as necessary.

• Communicate data-domain maturity and residual risk to the Board of Directors.

• Develop and maintain the enterprise-wide data risk management framework, including risk appetite statements, key risk indicators, and thresholds.

• Conduct independent assessments and challenges of technology initiatives to ensure alignment with risk appetite and regulatory expectations.

• Provide independent risk oversight concerning operational, technology, data, and compliance risks within Enterprise Data.

• Challenge line-of-defense self-assessments and ensure alignment of cybersecurity risk with business-unit risks, controls, and assessments.

• Collaborate with Risk Oversight Officers to create comprehensive risk management and transparent prioritization of technology activities.

• Participate in Technology, Data and Operations, CIRO-led, Enterprise, and Board Risk Committees.

• Review and challenge data and AI risk policies, standards, and procedures.

• Oversee assessments and monitoring of critical technology vendors and third-party service providers.

• Ensure compliance with regulatory requirements and supervisory guidance.

• Define, communicate, and implement the Enterprise Data and AI Risk Framework.

• Direct assessments regarding data management, privacy, protection, resiliency, and AI.

• Evaluate technology maturity and control adequacy in terms of performance, stability, security, and service availability.

• Monitor technology strategies, operations, AI, machine learning, project portfolios, development methodologies, and project milestones for associated risks.

• Review significant data-related technology incidents and oversee remediation efforts.

• Design recurring risk reporting packages for internal and governance reporting.

• Serve as the primary risk contact with regulators on data and AI risk concerns.

• Present risk assessments and updates to external stakeholders.

• Collaborate with Truist Audit Services and external auditors during data audits.

• Challenge and validate data regulatory remediations before closure.

• Lead, manage, and develop teammates both directly and indirectly.

• Advise senior leadership on technology-risk talent management and resource allocation.

• Facilitate technology risk education, skills training, and industry participation.

• Foster a risk-management culture and empower teammates to identify risk exposure and enhance enterprise programs.

⛳️ Requirements

• Advanced degree in Data, Data Science, Data Analytics, Computer Science, Information Systems, or a data/technology-related field is required.

• A minimum of fifteen (15+) years of progressive managerial experience in managing Data Operations, Data Management, and Risk Management within a Category 2 or 3 Large Financial Institution (LFI).

• Comprehensive understanding of regulatory requirements for complex financial services organizations, including Federal Reserve and FDIC regulations.

• Profound understanding of how data is captured, transformed, and utilized, with the capability to connect end-to-end processes independently.

• Experience utilizing modern tools to assess the effectiveness of data controls.

• At least fifteen (15+) years of experience or equivalent proficiency in people management, showcasing competency in recruiting, developing, coaching, and mentoring talent.

• A minimum of fifteen (15+) years of experience within a financial institution focusing on risk management or equivalent work experience.

• Strong knowledge of data governance, privacy requirements, and AI risk management.

• Familiarity with enterprise architecture and emerging technologies is essential.

• Knowledge of FFIEC, COBIT, NIST, ITIL, and technology risk management practices.

• Ability to lead both direct and indirect reports, including executive-level leaders.

• Exceptional verbal and written communication, presentation, and facilitation skills.

• Capability to influence and effectively communicate with C-suite executives and board members, translating technical concepts for diverse audiences.

• Proven experience in building and leading high-performing teams.

• Preferred: Bachelor’s degree in finance or a business-related field.

• Preferred: Professional designations such as CISA, CRISC, or CPM.

• Preferred: Experience in strategic business and financial planning.

• Preferred: An innovative mindset with an understanding of industry-recognized tools for enterprise data programs and strong control environments.

• Preferred: Experience with audit processes and techniques.

• Fluency in the English language is required.

• Ability to perform essential functions, with reasonable accommodations available for individuals with disabilities.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• Disability insurance

• Accidental death and dismemberment coverage

• Tax-preferred savings accounts

• 401k plan

• A minimum of 10 days of vacation during the first year of employment, prorated as applicable

• 10 sick days, prorated as applicable

• Paid holidays

• Defined benefit pension plan, depending on position and division

• Restricted stock units, depending on position and division

• Deferred compensation plan, depending on position and division

• Reasonable accommodations for individuals with disabilities

• Commitment to equal opportunity employment

• Drug-free workplace