Information Security Consultant

Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

1. Manages information security projects and processes aligned with organizational policies and regulatory requirements.
2. Conducts threat analysis, vulnerability assessments, and penetration testing to identify and mitigate security risks.
3. Monitors system access and embeds forensic tools for attack detection, investigation, and reconstruction.
4. Responds strategically to security incidents and coordinates incident response activities to minimize impact.
5. Deploys identity and access management, data protection, and security best practices across the organization.
6. Collaborates with internal teams and stakeholders to safeguard against unauthorized access and data breaches.
7. Implements and supports security technologies and tools to enhance the organization’s security posture.
8. Enforces security policies, standards, and procedures to address emerging threats and compliance needs.
9. Develops technical solutions using deep analysis of technical security and privacy systems.
10. Provides technical guidance and direction for security-related projects, initiatives, and processes.

The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

1. Bachelors degree in Computer Science, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 5 years of professional experience in information security.
3. Strong knowledge of data security, privacy laws, regulatory compliance, and advanced security technologies.
4. Experience in threat analysis, vulnerability testing, incident response, and forensic methodologies.

Preferred Qualifications

1. Masters degree in a relevant technical discipline.
2. Experience in the financial services industry.
3. Advanced professional certifications such as CISSP, CISM, CRISC, or equivalent.
4. Knowledge of enterprise security architectures, risk management frameworks, and cutting-edge security technologies.
5. Experience managing technical projects or processes.

General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position.Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truists generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truists defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As