Head of Third Party Resilience Program Oversight

The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

The Head of Third Party Resilience is responsible for leading the strategy, governance, and execution of the firm’s third party operational resilience capability. This role ensures that critical external service providers supporting the bank’s core business lines and critical operations can prevent, withstand, and recover from disruptions in a manner consistent with the bank’s resilience objectives, risk appetite, and regulatory expectations.

Reporting to the Head of Enterprise Resilience, this role operates as the firm’s senior authority on third party resilience and partners closely with Procurement, Third Party Risk Management (TPRM), Enterprise Risk, Technology, Information Security, Legal, and Business Continuity / Disaster Recovery (BC/DR) teams to embed resilience requirements throughout the third party lifecycle.

The Head of Third Party Resilience plays a critical role in aligning outsourced services with the bank’s enterprise resilience framework, Client Resilience Commitments (CRCs), and impact tolerance expectations.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Program Leadership & Governance
1.    Lead the design, implementation, and ongoing enhancement of the Third Party Resilience Framework, policies, and standards in alignment with the Enterprise Resilience Office (ERO) and applicable regulatory guidance (e.g., FFIEC, Federal Reserve, FDIC).
2.    Establish governance structures to oversee third party resilience risks, including escalation pathways, reporting mechanisms, and accountability models.
3.    Deliver clear, concise reporting to executive leadership and governance committees on third party resilience posture, emerging risks, trends, and key performance and risk indicators.
4.    Serve as the primary point of contact for regulatory examinations, internal audits, and supervisory inquiries related to third party operational resilience.

Risk Identification, Assessment & Ongoing Monitoring
5.    [CW1.1]Assess third party dependencies that support critical business services, systems, and processes, with particular focus on vendors aligned to Client Resilience Commitments.
6.    Maintain oversight of an authoritative inventory of critical third party services and resilience attributes, including recovery capabilities, dependencies, and concentration risks.
7.    Direct risk based monitoring of third party resilience controls and performance, including availability, recoverability, incident management, and compliance with contractual service level expectations.
8.    Integrate third party resilience insights into enterprise level operational resilience reporting, metrics, and risk appetite monitoring.

Contingency Planning, Testing & Recovery
9.    Partner with business, technology, and risk stakeholders to ensure contingency, exit, and substitution strategies for critical third party services are in line with resilience expectations
10.    Support third party participation in enterprise resilience testing, disaster recovery exercises, scenario analysis, and minimum viable bank (MVB) simulations.
11.    Ensure third party dependencies are fully incorporated into Business Continuity, Disaster Recovery, and Enterprise Incident Management planning and execution.
12.    Oversee review of third party testing results, after action reports, and remediation activities related to resilience gaps.
Contractual Resilience & Lifecycle Integration
13.    Collaborate with Procurement and Legal to define and operationalize minimum resilience requirements within contracts, including incident notification expectations, recovery obligations, testing participation, and subcontractor oversight.
14.    Partner with TPRM and TPROF to align third party resilience requirements with onboarding, periodic reassessments, and ongoing monitoring processes.
15.    Provide subject matter expertise and effective challenge when third party arrangements do not meet enterprise resilience expectations.
Cross Functional Leadership & Influence
16.    Influence senior business, risk, and technology leadership to embed third party resilience considerations into sourcing decisions, operating models, and service design.
17.    Collaborate closely with Technology, Cyber, Data, and Infrastructure teams to align third party resilience with broader technology and cyber resilience initiatives.
18.    Promote a strong culture of accountability and ownership for third party resilience across the organization.
QUALIFICATIONS
Required Qualifications:
The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1.    15+ experience in operational resilience, third party risk management, business continuity, technology risk, or enterprise risk management, preferably within a large, highly regulated financial institution.
2.    Strong working knowledge of regulatory expectations related to operational resilience and third party oversight, including FFIEC guidance and Federal Reserve supervisory standards.
3.    Proven experience designing, governing, or scaling enterprise level risk or resilience programs.
4.    Demonstrated ability to engage credibly with senior executives, regulators, auditors, and cross functional stakeholders.
5.    Strong leadership, communication, and influence skills, with the ability to translate complex risk concepts into actionable guidance.

Preferred Qualifications:
1.    Excellent written and verbal communication skills with ability to express complex concepts and processes in a straightforward manner
2.    Experience developing and enhancing documentation and communications reports using a wide array of information sources and publishing to different audiences, including senior management, corporate risk groups and regulators
3.    Adaptable to rapid large-scale changes in business processes and organizational structure
4.    Comfortable working in a complex matrix environment with simultaneous responsibility to business line management and department, group and corporate level risk teams
5.    Experience presenting to Regulators including but not limited to the Federal Reserve Board (FRB), Office of the Comptroller of the Currency (OCC), and the Federal Deposit Insurance Corporation (FDIC)

*Remote locations will be considered for this role. The annual base salary for this position is $245,000 - $285,000.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.

Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.

EEO is the Law    E-Verify IER Right to Work