Sr. Cybersecurity Operational Risk Officer
keybankDenver (CO)
Sr. Cybersecurity Operational Risk Officer
Posted today
keybankDenver (CO)
SENIORITY
Manager
About the role
Overview:
In this 2nd Line of Defense role, you provide independent risk oversight for cybersecurity and information security across business units, focusing on technology, data, and AI/ML systems. You will challenge risk posture, partner with leaders, and guide mitigation aligned to risk appetite. You’ll oversee AI-related risks and work with auditors and regulators to ensure compliant, effective controls. This role supports strategic tech initiatives and emerging technologies within KeyCorp. Compensation / Benefits base salary plus incentive compensation hybrid work arrangement with in-office presence competitive benefits package opportunity to influence risk strategy collaborative culture focus on professional development
Responsibilities:
Evaluate risk and control coverage in key processes and perform gap assessments Foster relationships with leaders to gain insights on cyber/AI risks and strategic tech initiatives Monitor security portfolio and AI deployments to ensure alignment with risk appetite Review cybersecurity processes and conduct targeted assessments for oversight and compliance Provide expert advice on cybersecurity and AI risk management with practical mitigation solutions Analyze AI-related risks in new products/services, including third parties Assist with cybersecurity and technology audits and regulatory examinations Escalate significant risk issues and coordinate corrective actions Monitor emerging cyber and AI risks and regulatory trends
Key requirements:
Bachelor degree in a related field or commensurate experience Minimum 8 years in Cybersecurity Risk, Information Security Risk, Technology Risk or related audits Practical knowledge of security operations, cyber defenses, IAM, network/cloud security Functional knowledge of AI/ML security risk concepts (AI governance, data security, adversarial threats) Strong listening, synthesis, and communication skills Experience with auditors/regulators and cross-functional collaboration Strategic thinking with execution capability and holistic risk view In-depth knowledge of controls, risk assessments, and compliance techniques Project/workload management across multiple stakeholders Proficient with MS Office, Outlook, SharePoint Active listening Strategic thinking Cross-functional collaboration Cybersecurity operations Security architecture (network/cloud) Identity and access management
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.