KeyBank NA logo

Sr. Cybersecurity Operational Risk Officer

KeyBank NA

Cincinnati, OHJobSeen todaySeen in employer's feed today

Most applications go out cold — see where you stand first. No sign-up to start.

Watch jobs like this.

At a glance

Compensation
No compensation found
Location
Cincinnati, OH
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Requirements

Credentials this posting asks for.

Bachelor's degree

Job overview

Reporting to the Director of Cybersecurity Risk Oversight, this senior second-line risk management role provides independent oversight and subject matter expertise to business units. It oversees cybersecurity and information security risks across Key Technology Services and enterprise areas managing technology, data, and AI/ML systems. The role evaluates controls and emerging risks, advises on mitigation, and supports audits and regulatory examinations.

Skills & qualifications

RequiredNice to have

Skills

Cybersecurity Risk ManagementSecurity OperationsCyber DefensesIdentity and Access ManagementNetwork Security ArchitectureCloud Security ArchitectureAI/ML Security RiskAI GovernanceData SecurityAdversarial ThreatsActive ListeningInformation SynthesisAuditor and Regulator RelationsStrategic ThinkingIndependent ExecutionHolistic Risk AssessmentCybersecurity ControlsTechnology ControlsRisk AssessmentsCompliance ImplementationRegulatory RequirementsWorkflow ManagementTask Assignment ManagementProcess Efficiency

Qualifications

Bachelor's in Cybersecurity or Related Field8+ Years Cybersecurity or Technology Risk Experience

Full job description

Location: 4910 Tiedeman Road, Brooklyn Ohio About the Job Reporting to the Director of Cybersecurity Risk Oversight, the Sr. Cybersecurity Risk Oversight Professional is a 2nd Line of Defense risk management position that provides independent oversight and Risk Management subject matter expertise to 1st Line of Defense Business Units and their corresponding Business Risk Teams. This position is responsible for Cybersecurity and Information Security Risk Oversight of the Key Technology Services line of business, as well as technology and information security risk oversight for areas of the enterprise that manage technology, data and AI/ML systems. As part of this oversight role, experience with cybersecurity domains - including security operations, network and cloud security architecture, identity and access management, and cyber defenses - along with emerging AI security risk and AI governance frameworks.Candidates should have a background and proven, ability to identify material risks, provide credible challenge and assist in developing effective mitigation strategies. Essential Functions *Evaluate risk and control identification within key processes and perform gap assessments on control coverage as well as first line of defense identification processes *Collaborate and independently foster relationships with leaders to gain insights on cybersecurity posture, emerging cyber and AI-related risks and strategic technology initiatives, identifying opportunities to mitigate risk. *Evaluate and monitor security portfolio, strategic initiatives, including AI adoption and deployments, and new and emerging technologies to ensure alignment with cyber risk appetite and business goals. *Review cybersecurity processes, risks and controls, and conduct targeted assessments to support effective oversight and compliance with enterprise risk management requirements. *Provide expert advice on cybersecurity and AI risk management practices, offering practical solutions to mitigate identified risks. *Analyze and assess cybersecurity and AI-related risks associated with new products or services including third parties. *Assist with cybersecurity and technology audits and regulatory examinations, ensuring thorough and timely responses to inquiries and findings. *Escalate and report any significant risk issues and facilitate appropriate corrective actions. *Perform ongoing monitoring of emerging cyber and AI-related risks and industry and regulatory trends. Required Qualifications *Bachelor's degree in cybersecurity, information systems, computer science, business or related field, or commensurate/relevant degree is required. *Minimum 8 years industry experience in Cybersecurity Risk, Information Security Risk, Technology Risk or External/Internal Security Audit. *Practical knowledge of cybersecurity domains such as security operations, cyber defenses, identity and access management, network/cloud security architecture. *Functional knowledge with AI/ML security risk concepts (e.g., AI governance, data security, adversarial threats). *Outstanding active listening skills with the ability to synthesize complex information or processes. *Demonstrated ability to work with internal and external auditors and regulators. *Ability to think strategically coupled with the ability to independently drive executionto closure. *Ability to view risk holistically within a dynamic, fast-paced team environment *In-depth practical knowledge of cybersecurity and technology controls, risk assessments and applicable techniques for implementation of compliance and regulatory requirements. * *Manage workflows and task assignments simultaneously to ensure timely completion of work *Have an execution-oriented, process efficiency and co

Similar jobs, posted recently

Open roles like this one, listed in the last 30 days.

You've read the whole posting — now see how you match it.