Segment Risk Manager - Cybersecurity

Huntington Bank is seeking a Segment Risk Manager - Cybersecurity to oversee and administer operational and regulatory risk strategy programs for a business segment. This hybrid role in Columbus, OH emphasizes operational and regulatory risk governance, identity and access management risk oversight, issue management, and executive-level reporting across the risk and control portfolio.

In this position, you will evaluate control effectiveness, drive identity and access management risk identification and challenge, and ensure that risks and control gaps are appropriately escalated and managed. You will also support enterprise risk management alignment through structured risk assessments and governance processes.

Responsibilities

• Evaluate the effectiveness of controls and escalate as appropriate.
• Lead risk identification, assessment, and effective challenge across Identity and Access Management, including identity governance and administration, access lifecycle management, authentication and authorization, SSO/federation, and privileged access management.
• Ensure material risks and control gaps are identified, escalated, and managed.
• Manage the governance of issues through their lifecycle, from ideation to validation and closure.
• Execute risk assessments against defined scopes and planned initiatives in alignment with enterprise risk management frameworks.
• Support processes such as Risk and Control Self-Assessment (RCSA), Exception Management, and assigned business governance groups.
• Provide advisory guidance on control design, cybersecurity standards and policies, metrics, and processes to support regulatory and maturity requirements.
• Support executive reporting on the health and status of the risk, issues, and control portfolio.
• Act as a trusted advisor to help navigate ambiguity and provide a risk perspective on new challenges or opportunities.
• Escalate issues requiring senior management attention in a timely manner.
• Work with business segment management to ensure the overall risk function supports strategic goals.
• Collaborate with audit, business segment, and corporate risk partners to address issues using action plans and target dates.
• Maintain awareness of credit risk associated with the assigned business segment.
• Perform other duties as assigned.

Requirements

• Bachelor’s degree.
• Minimum 5 years of experience in Audit, Compliance, Risk Management, or Operational Risk.
• In lieu of a Bachelor’s degree, 4 additional years of segment-specific or risk related experience may be considered.
• 3+ years supporting Identity and Access Management (IAM) processes, procedures, and technologies, including identity governance, access management, authentication, authorization, and privileged access management.
• 2 years of experience in cybersecurity or a related domain.
• 2 years of experience with one or more cloud platforms: AWS, Azure, or GCP.
• 2 years of experience with deployment pipelines, DevOps, containers, and APIs.
• 2 years of experience with threat modeling.
• 2 years of experience governing cybersecurity-related policies, procedures, or standards.
• 2 years of experience with quantitative and qualitative risk assessments.
• Excellent communication skills to negotiate internally, often at a senior level.
• At least 7 years of experience within the financial services industry.
• At least 4 years of experience working at a Category 3 or higher financial institution.
• Certifications such as CISSP, CISM, CISA, GIAC, CIPP/US, or other security/privacy certifications are preferred but not required.
• Organized, responsive, and highly thorough approach to problem-solving.
• Demonstrable cyber risk knowledge from real-world environments and situations.

Technologies

• AWS
• Azure
• GCP
• DevOps
• Containers
• APIs
• Identity and Access Management (IAM)
• SSO/federation
• Privileged access management
• Risk and Control Self-Assessment (RCSA)
• Enterprise risk management frameworks

Workplace and Status

• Exempt status: Yes
• Workplace type: Office
• Location: Columbus, OH (hybrid)

Certain positions outside the branch network may be eligible for a flexible work arrangement. Huntington Bank combines in-office work and work from home, and remote roles may have opportunities to meet in offices for moments that matter; specific arrangements are provided by the hiring team.

Note to Agency Recruiters

• Huntington Bank will not pay a fee for any placement resulting from an unsolicited resume.
• All unsolicited resumes sent to Huntington Bank colleagues, directly or indirectly, will be considered Huntington Bank property.
• Recruiting agencies must have a valid, written, fully executed Master Service Agreement and Statement of Work for consideration.