Information Security Consultant (Strategic Partner Advisor)

The position is described below. If you want to apply click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application youll be invited to create a profile which will let you see your application status and any communications. If you already have a profile with us you can log in to check status.

Need Help

If you have a disability and need assistance with the application you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries wont receive a response).

Regular or Temporary:

Regular

Language Fluency: English (Required)

Work Shift:

1st shift (United States of America)

Information Security Consultant serves as a strategic partner supporting privacy cybersecurity information security and data protection initiatives across the organization. This role combines information security expertise with program management incident response coordination executive engagement and operational leadership responsibilities.
The ideal candidate will function as a trusted advisor and chief-of-staff-style partner to leadership helping drive strategic priorities ensure projects are executed effectively and coordinate activities across a broad portfolio of security privacy and data protection programs. This individual will regularly engage with executive and senior leadership support complex data incident response activities and provide hands-on assistance with security tools data analysis and operational processes when needed.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed both major and minor which are not mentioned below. Specific activities may change from time to time.

• Serves as a strategic partner and trusted advisor supporting Privacy Cybersecurity Information Security and Data Protection initiatives.
• Manages information security projects programs and operational processes aligned with organizational policies and regulatory requirements.
• Acts as a trusted delegate and secondary representative for leadership participating in meetings with executives senior leaders regulators and key stakeholders.
• Ensures projects deliverables action items and strategic initiatives are established tracked and completed on schedule.
• Conducts threat analysis vulnerability assessments and penetration testing to identify and mitigate security risks.
• Monitors system access and embeds forensic tools for attack detection investigation and reconstruction.
• Responds strategically to security incidents and coordinates incident response activities to minimize impact.
• Supports large-scale cybersecurity privacy and compromised data response efforts involving internal or external exposure of sensitive information.
• Assists with evaluating data risk regulatory obligations client notification requirements and business impacts associated with security incidents.
• Deploys identity and access management data protection and security best practices across the organization.
• Collaborates with internal teams and stakeholders to safeguard against unauthorized access and data breaches.
• Implements and supports security technologies privacy tools and data protection solutions to enhance the organizations security posture.
• Provides operational support across a broad portfolio of security and privacy technologies with the ability to perform hands-on troubleshooting and analysis when necessary.
• Leverages AI-enabled technologies and internally developed analytical agents to support investigations incident analysis decision-making and risk assessments.
• Develops technical solutions using deep analysis of technical security and privacy systems.
• Reviews analyzes and modifies existing data queries and reporting logic to support investigations incident response activities and operational needs.
• Provides technical guidance and direction for security-related projects initiatives and processes.
• Enforces security policies standards and procedures to address emerging threats and compliance needs.
• Develops executive-level presentations status reporting briefing materials and communications regarding security privacy operational readiness and incident response activities.

Required Qualifications
The requirements listed below are representative of the knowledge skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelors degree in Computer Science Information Systems a related field or equivalent education training and work-related experience.
• Minimum of 5 years of professional experience in information security.
• Strong knowledge of data security privacy laws regulatory compliance and advanced security technologies.
• Experience in threat analysis vulnerability testing incident response and forensic methodologies.

Preferred Qualifications

• Masters degree in relevant technical discipline.
• Experience in the financial services industry.
• Professional certifications in IAPP (CIPP CIPM CIPT AIGP etc.)
• Experience working with Snowflake
• Advanced professional certifications such as CISSP CISM CRISC or equivalent.
• Knowledge of enterprise security architectures risk management frameworks and cutting-edge security technologies.
• Experience managing technical projects or processes.
• Experience supporting privacy cybersecurity data protection incident response governance risk and compliance programs.
• Demonstrated ability to work effectively with executive leadership and present information to senior stakeholders.
• Experience serving in a Chief of Staff strategic operations program management or similar leadership-support capacity.
• Knowledge of data privacy regulations breach response requirements and regulatory notification obligations.
• Experience coordinating responses to compromised data events and large-scale security incidents.
• Familiarity with AI-enabled analysis automation and decision-support technologies.
• Experience working with SQL or similar query languages including the ability to review interpret and modify existing queries to support business and incident response needs.
• Technical background in software development data analytics cybersecurity operations or information security engineering is preferred.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits though eligibility for specific benefits may be determined by the division of Truist offering the offers medical dental vision life insurance disability accidental death and dismemberment tax-preferred savings accounts and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment along with 10 sick days (also prorated) and paid holidays. For more details on Truists generous benefit plans please visit our Benefits site. Depending on the position and division this job may also be eligible for Truists defined benefit pension plan restricted stock units and/or a deferred compensation plan. As you advance through the hiring process you will also learn more about the specific benefits available for any non-temporary position for which you apply based on full-time or part-time status position and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race gender color religion citizenship or national origin age sexual orientation gender identity disability veteran status or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law E-Verify IER Right to Work