Information Security Consultant (Strategic Partner Advisor)

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Information Security Consultant serves as a strategic partner supporting privacy, cybersecurity, information security, and data protection initiatives across the organization. This role combines information security expertise with program management, incident response coordination, executive engagement, and operational leadership responsibilities.
The ideal candidate will function as a trusted advisor and chief-of-staff-style partner to leadership, helping drive strategic priorities, ensure projects are executed effectively, and coordinate activities across a broad portfolio of security, privacy, and data protection programs. This individual will regularly engage with executive and senior leadership, support complex data incident response activities, and provide hands-on assistance with security tools, data analysis, and operational processes when needed.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Serves as a strategic partner and trusted advisor supporting Privacy, Cybersecurity, Information Security, and Data Protection initiatives.
• Manages information security projects, programs, and operational processes aligned with organizational policies and regulatory requirements.
• Acts as a trusted delegate and secondary representative for leadership, participating in meetings with executives, senior leaders, regulators, and key stakeholders.
• Ensures projects, deliverables, action items, and strategic initiatives are established, tracked, and completed on schedule.
• Conducts threat analysis, vulnerability assessments, and penetration testing to identify and mitigate security risks.
• Monitors system access and embeds forensic tools for attack detection, investigation, and reconstruction.
• Responds strategically to security incidents and coordinates incident response activities to minimize impact.
• Supports large-scale cybersecurity, privacy, and compromised data response efforts involving internal or external exposure of sensitive information.
• Assists with evaluating data risk, regulatory obligations, client notification requirements, and business impacts associated with security incidents.
• Deploys identity and access management, data protection, and security best practices across the organization.
• Collaborates with internal teams and stakeholders to safeguard against unauthorized access and data breaches.
• Implements and supports security technologies, privacy tools, and data protection solutions to enhance the organization's security posture.
• Provides operational support across a broad portfolio of security and privacy technologies, with the ability to perform hands-on troubleshooting and analysis when necessary.
• Leverages AI-enabled technologies and internally developed analytical agents to support investigations, incident analysis, decision-making, and risk assessments.
• Develops technical solutions using deep analysis of technical security and privacy systems.
• Reviews, analyzes, and modifies existing data queries and reporting logic to support investigations, incident response activities, and operational needs.
• Provides technical guidance and direction for security-related projects, initiatives, and processes.
• Enforces security policies, standards, and procedures to address emerging threats and compliance needs.
• Develops executive-level presentations, status reporting, briefing materials, and communications regarding security, privacy, operational readiness, and incident response activities.

Required Qualifications
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor’s degree in Computer Science, Information Systems, a related field, or equivalent education, training, and work-related experience.
• Minimum of 5 years of professional experience in information security.
• Strong knowledge of data security, privacy laws, regulatory compliance, and advanced security technologies.
• Experience in threat analysis, vulnerability testing, incident response, and forensic methodologies.

Preferred Qualifications

• Master's degree in relevant technical discipline.
• Experience in the financial services industry.
• Professional certifications in IAPP (CIPP, CIPM, CIPT, AIGP, etc.)
• Experience working with Snowflake
• Advanced professional certifications such as CISSP, CISM, CRISC, or equivalent.
• Knowledge of enterprise security architectures, risk management frameworks, and cutting-edge security technologies.
• Experience managing technical projects or processes.
• Experience supporting privacy, cybersecurity, data protection, incident response, governance, risk, and compliance programs.
• Demonstrated ability to work effectively with executive leadership and present information to senior stakeholders.
• Experience serving in a Chief of Staff, strategic operations, program management, or similar leadership-support capacity.
• Knowledge of data privacy regulations, breach response requirements, and regulatory notification obligations.
• Experience coordinating responses to compromised data events and large-scale security incidents.
• Familiarity with AI-enabled analysis, automation, and decision-support technologies.
• Experience working with SQL or similar query languages, including the ability to review, interpret, and modify existing queries to support business and incident response needs.
• Technical background in software development, data analytics, cybersecurity operations, or information security engineering is preferred.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law    E-Verify IER Right to Work