Huntington National Bank is hiring: Cybersecurity Risk Manager in Charlotte

Overview Summary: The Cybersecurity Risk Manager is responsible for oversight and administration of operational and regulatory risk strategy programs for a business segment. The role supports Huntington’s transformation and use of cybersecurity technologies, working with the Huntington Cyber Operations and Engineering teams to design and build technologies using best practices from FFIEC guidance, COBIT, NIST framework, and other recommended practices. The person will identify potential deficiencies, assist the business segment in audit findings and responses, review remediation plans, and act as a trusted advisor to identify risk to the company. Huntington is moving applications and infrastructure to leverage cloud provider services with a hybrid cloud and on-premises network. This Cyber Risk position partners with the cyber security segment to provide risk support, control and metric design, and challenge on technical implementations. The resource will help ensure cyber offerings follow governance processes, standards, and control requirements. As a Cyber Security Risk Manager, you’ll be a subject matter expert balancing the need for speed and flexibility of cloud and on‑premises infrastructure with protection against ongoing and potential security threats. The role supports financial services and helps assess and develop cloud strategy, information security/cybersecurity and IT risk management programs against regulatory requirements and industry best practices. The person will influence the transition to securing cloud computing and on‑premises platforms and help build compliant governance programs. Responsibilities Provide oversight and challenge to technical configurations, solutions and implementation of cyber security tools, systems, and platforms. Evaluate effectiveness of controls and escalate as appropriate. Direct self-monitoring and testing activities to ensure they are performed in accordance with Corporate Risk Management requirements. Evaluate the adequacy and effectiveness of enterprise and regulatory controls and the resulting risk and control self-assessments. Deliver timely escalation of all issues requiring attention to senior management. Work with business segment management to ensure that the overall risk function is effectively supporting strategic goals. Collaborate with audit/business segment/corporate risk to address issues with plausible action plans and target dates. Act as the central point for receipt and distribution of important risk information for the business segment and reciprocate the flow of information back to corporate risk management. Ensure business segment adheres to corporate and business unit policies and procedures. Must be aware of and keep abreast of Third-Party risk associated with the assigned business segment. Basic Qualifications Bachelor’s degree in computer science, cyber security, information technology, computer engineering or equivalent. Five years of any of the combined experience below in Cyber Security, Audit and Risk Management. 2 years experience Anti-Virus/Malware. 2 years’ experience in network security, firewalls, WAF, Tufin or similar. 2 years’ application and network segmentation. 2 years’ breach and attack simulation with tools like MITRE ATT&CK, AttackIQ or similar. 2 years in threat management, vulnerability management. 2 years using SAST, DAST, IAST, MAST or SCA tools. 2 years as a security engineer or architect. Preferred Qualifications Excellent communication skills required to negotiate internally, often at a senior level. Some external communication may be necessary. Understanding of FFIEC guidance, COBIT and NIST framework. Willingness to learn, able to learn on the job and a desire to continually learn and develop new technical skills. Strong written and oral communication skills. Organized, responsive, and thorough problem solver with demonstrable cyber risk knowledge based on real-world environments. Understanding of security requirements, best practices, and execution in various cloud implementation scenarios: IaaS, PaaS, SaaS. Mid-level professional with 5-10 years of experience in consulting, financial services, technology/fintech or government IT risk-related roles. Master’s degree or relevant professional qualifications with Risk / Security management. CISSP, CISM, CRISC, CISA, GIAC, CIPP/US or other security/privacy certifications preferred but not required. Workplace Type Office. Certain positions outside our branch network may be eligible for a flexible work arrangement, combining in-office and remote work. Specific arrangements will be provided by the hiring team. Huntington is an Equal Opportunity Employer. Tobacco-Free Hiring Practice: visit Huntington\'s Career Web Site for more details. #J-18808-Ljbffr