Head of Third Party Resilience Program Oversight

We need to output HTML fragment with sections: About the role? The posting includes description under "Please review the following job description:" then paragraphs. We need headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We have: - About the role: maybe the introductory paragraph describing role: "The Head of Third Party Resilience is responsible for leading the strategy, governance, and execution..." That's about the role. - Responsibilities: the list of duties under "Essential Duties And Responsibilities" with subheadings: Program Leadership & Governance, Risk Identification..., Contingency Planning..., Contractual Resilience..., Cross Functional Leadership... We need to capture duties as list items. - Requirements: maybe "Regular or Temporary: Regular Language Fluency: English (Required) Work Shift: 1st shift (United States of America)" but we should not repeat job title. However these are metadata; we can fold minor metadata into a short

or drop it. The instruction: "Do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

or drop it." So we could include a short paragraph with those details. - Qualifications: there is a "Qualifications" section with Required Qualifications list and Preferred Qualifications list. We'll include that. - Skills: maybe not separate; but we could combine with qualifications? The instruction says use headings only if real content. There's no explicit Skills section separate from qualifications. Could we create a Skills heading from the qualifications? Probably not; better to omit Skills if no explicit. - Benefits: there is "General Description of Available Benefits for Eligible Employees of Truist Financial Corporation:" with details. So include Benefits section. - Pay: there is "The annual base salary for this position is $245,000 - $285,000." So include Pay. - Schedule: we have "Work Shift: 1st shift (United States of America)" and maybe "Regular or Temporary: Regular". That's schedule info. Could include Schedule section with that. We must not include boilerplate like EEO, etc. Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. So we need to strip out the EEO paragraph, Drug Free Workplace, etc. Also remove the initial instructions about applying, profile, need help, accommodation request email. Those are application instructions/boilerplate; remove them. We need to preserve all substantive information: role description, duties, qualifications, benefits, pay, schedule, language fluency, work shift, regular/temporary. We must not repeat the job title as heading. The job title is "Head of Third Party Resilience". Not to be used as heading. We need to output only HTML fragment, no /, no markdown fences. Structure: Use

for section headings. Use

• for any list of duties/requirements/benefits, and

  for prose. We need to decide which content goes into which section. Potential sections: - About the role: paragraph(s) describing role. - Responsibilities: list of duties (maybe grouped under subheadings? but we can just list each duty as li). Could also keep subheadings as

  ? Not allowed; only h3 for section headings. We could embed subheadings as inside li? But instruction: Use

  • for any list of duties/requirements/benefits. It doesn't forbid other tags inside li. Could include for subheading. But maybe simpler: just list each duty as li, preserving the text. - Requirements: maybe include language fluency, work shift, regular/temporary as a short paragraph. - Qualifications: list required and preferred qualifications. - Benefits: list benefits. - Pay: paragraph with salary range. - Schedule: maybe we already covered work shift; but we could combine with Requirements. However we need to decide if we need separate Schedule section. The posting has "Work Shift: 1st shift (United States of America)" and "Regular or Temporary: Regular". That's schedule info. Could put under Schedule section. We must not create sections with filler like "commensurate with experience". We have actual content. Let's extract substantive content. From the posting: Intro after "Please review the following job description:": "The Head of Third Party Resilience is responsible for leading the strategy, governance, and execution of the firm’s third party operational resilience capability. This role ensures that critical external service providers supporting the bank’s core business lines and critical operations can prevent, withstand, and recover from disruptions in a manner consistent with the bank’s resilience objectives, risk appetite, and regulatory expectations. Reporting to the Head of Enterprise Resilience, this role operates as the firm’s senior authority on third party resilience and partners closely with Procurement, Third Party Risk Management (TPRM), Enterprise Risk, Technology, Information Security, Legal, and Business Continuity / Disaster Recovery (BC/DR) teams to embed resilience requirements throughout the third party lifecycle. The Head of Third Party Resilience plays a critical role in aligning outsourced services with the bank’s enterprise resilience framework, Client Resilience Commitments (CRCs), and impact tolerance expectations." That's About the role. Then "Essential Duties And Responsibilities" with subheadings and bullet-like paragraphs. We need to capture each duty as list items. Let's extract each duty paragraph: Program Leadership & Governance: - Lead the design, implementation, and ongoing enhancement of the Third Party Resilience Framework, policies, and standards in alignment with the Enterprise Resilience Office (ERO) and applicable regulatory guidance (e.g., FFIEC, Federal Reserve, FDIC). - Establish governance structures to oversee third party resilience risks, including escalation pathways, reporting mechanisms, and accountability models. - Deliver clear, concise reporting to executive leadership and governance committees on third party resilience posture, emerging risks, trends, and key performance and risk indicators. - Serve as the primary point of contact for regulatory examinations, internal audits, and supervisory inquiries related to third party operational resilience. Risk Identification, Assessment & Ongoing Monitoring [CW1.1]: - Assess third party dependencies that support critical business services, systems, and processes, with particular focus on vendors aligned to Client Resilience Commitments. - Maintain oversight of an authoritative inventory of critical third party services and resilience attributes, including recovery capabilities, dependencies, and concentration risks. - Direct risk based monitoring of third party resilience controls and performance, including availability, recoverability, incident management, and compliance with contractual service level expectations. - Integrate third party resilience insights into enterprise level operational resilience reporting, metrics, and risk appetite monitoring. Contingency Planning, Testing & Recovery: - Partner with business, technology, and risk stakeholders to ensure contingency, exit, and substitution strategies for critical third party services are in line with resilience expectations - Support third party participation in enterprise resilience testing, disaster recovery exercises, scenario analysis, and minimum viable bank (MVB) simulations. - Ensure third party dependencies are fully incorporated into Business Continuity, Disaster Recovery, and Enterprise Incident Management planning and execution. - Oversee review of third party testing results, after action reports, and remediation activities related to resilience gaps. Contractual Resilience & Lifecycle Integration: - Collaborate with Procurement and Legal to define and operationalize minimum resilience requirements within contracts, including incident notification expectations, recovery obligations, testing participation, and subcontractor oversight. - Partner with TPRM and TPROF to align third party resilience requirements with onboarding, periodic reassessments, and ongoing monitoring processes. - Provide subject matter expertise and effective challenge when third party arrangements do not meet enterprise resilience expectations. Cross Functional Leadership & Influence: - Influence senior business, risk, and technology leadership to embed third party resilience considerations into sourcing decisions, operating models, and service design. - Collaborate closely with Technology, Cyber, Data, and Infrastructure teams to align third party resilience with broader technology and cyber resilience initiatives. - Promote a strong culture of accountability and ownership for third party resilience across the organization. Now Qualifications: "Required Qualifications: The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions." Then list: - 15+ experience in operational resilience, third party risk management, business continuity, technology risk, or enterprise risk management, preferably within a large, highly regulated financial institution. - Strong working knowledge of regulatory expectations related to operational resilience and third party oversight, including FFIEC guidance and Federal Reserve supervisory standards. - Proven experience designing, governing, or scaling enterprise level risk or resilience programs. - Demonstrated ability to engage credibly with senior executives, regulators, auditors, and cross functional stakeholders. - Strong leadership, communication, and influence skills, with the ability to translate complex risk concepts into actionable guidance. Then "Preferred Qualifications:" list: - Excellent written and verbal communication skills with ability to express complex concepts and processes in a straightforward manner - Experience developing and enhancing documentation and communications reports using a wide array of information sources and publishing to different audiences, including senior management, corporate risk groups and regulators - Adaptable to rapid large-scale changes in business processes and organizational structure - Comfortable working in a complex matrix environment with simultaneous responsibility to business line management and department, group and corporate level risk teams - Experience presenting to Regulators including but not limited to the Federal Reserve Board (FRB), Office of the Comptroller of the Currency (OCC), and the Federal Deposit Insurance Corporation (FDIC) Then "Remote locations will be considered for this role." Then "The annual base salary for this position is $245,000 - $285,000." Then "General Description of Available Benefits for Eligible Employees of Truist Financial Corporation:" paragraph. Then details: "All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist’s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist’s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work." We should keep that as benefits content. Now metadata: "Regular or Temporary: Regular Language Fluency: English (Required) Work Shift: 1st shift (United States of America)". We'll put that in a short paragraph maybe under Requirements or Schedule. We need to decide sections. Potential sections: - About the role (h3) - Responsibilities (h3) with ul li - Requirements (h3) maybe containing language fluency, work shift, regular/temporary as p. - Qualifications (h3) with ul li for required and preferred (maybe separate subheadings? Could just list all as li, but we could separate required and preferred with headings inside? Not allowed to create extra headings besides h3? The instruction only says use h3 for section headings. It doesn't forbid using other headings like h4 inside? It says "Use

    for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." It implies we should use h3 for those section headings; we could still use other headings for sub-sections but maybe better to avoid. We could just have two lists: Required Qualifications and Preferred Qualifications as separate