Audit Director - IT Cyber Security

PNC

1d • $100,000 - $218,500 • Onsite

About The Position

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As an Internal Audit Manager, you will be within PNC’s Internal Audit organization, supporting Cyber Security within the Information Technology Audit team. As an Internal Audit Manager within PNC’s Information Technology Audit team, you will have the opportunity to use your knowledge and expertise of information technology risk and control principles while leading a wide variety of technology auditing assignments. The Internal Audit Manager is responsible for leading teams of individuals within the audit execution process by conducting both standalone cyber security audits and business-oriented integrated audits in support of the annual audit plan. A successful candidate should be a self-starter with the ability to manage multiple audits concurrently and independently, should exhibit strong leadership skills, and the ability to identify risks and gaps in processes, as well as the additional skillsets listed below: • 5+ years of internal or external IT auditing experience, or relevant business experience • Understanding of current and evolving cyber security threats, tactics, and techniques • Knowledge of the tools, and techniques for detecting, addressing, and preventing cyber security incidents • Experience identifying cybersecurity risks impacting a global organization • Solid understanding of internal control concepts, with the ability to evaluate and determine the adequacy of controls by considering business and technology risks • Understanding of laws, regulations and industry standards related to Technology and Security (such as GLBA, HIPAA, PCI, NIST, etc). • Excellent written, verbal, and presentation skills; adept at presenting complex and sensitive issues to senior management • Strong interpersonal and influencing skills, with the ability to establish credibility and build partnerships with senior business and control partners • Security or audit-related professional certification preferred, such as CISA, CISSP, CIA, Cloud Azure/AWS, etc. • Proven ability to independently manage all phases of the audit lifecycle, including planning, fieldwork, and reporting, while driving results and maintaining accountability Are you interested in an opportunity to join a dynamic and transformative audit environment that encourages innovation, champions data analytics, promotes process automation, and embraces emerging risks. PNC’s Internal Audit department is composed of industry leaders who provide independent, objective assurance and consulting services designed to add value and recommend improvement to the organization’s operations. Using cutting edge technology, you would participate in a collaborative setting and help guide PNC’s Internal Audit department into the future. • We execute a Risk Based Audit Approach • We value Data Analytics and Automation • We leverage Continuous Monitoring/Auditing Techniques • We recruit, develop, and retain great talent We are looking for individuals who are passionate about mitigating risk, problem solving, and protecting the bank and also can contribute in the following ways: • Provide an independent and objective perspective • Ability to manage risk and think strategically • Communicate and collaborate effectively with team members and business partners • Encourage, motivate, and guide individuals or teams in learning and improving effectiveness • Efficiently utilizes time and resources to achieve results PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.

Requirements

• 5+ years of internal or external IT auditing experience, or relevant business experience
• Understanding of current and evolving cyber security threats, tactics, and techniques
• Knowledge of the tools, and techniques for detecting, addressing, and preventing cyber security incidents
• Experience identifying cybersecurity risks impacting a global organization
• Solid understanding of internal control concepts, with the ability to evaluate and determine the adequacy of controls by considering business and technology risks
• Understanding of laws, regulations and industry standards related to Technology and Security (such as GLBA, HIPAA, PCI, NIST, etc).
• Excellent written, verbal, and presentation skills; adept at presenting complex and sensitive issues to senior management
• Strong interpersonal and influencing skills, with the ability to establish credibility and build partnerships with senior business and control partners
• Proven ability to independently manage all phases of the audit lifecycle, including planning, fieldwork, and reporting, while driving results and maintaining accountability
• Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role.
• Roles at this level typically require a university / college degree.
• Industry-relevant experience is typically 8+ years.
• At least 5 years of prior management experience is typically required.
• Proven leadership experience with a moderate to large scope of responsibility is required.

Nice To Haves

• Security or audit-related professional certification preferred, such as CISA, CISSP, CIA, Cloud Azure/AWS, etc.
• Higher level education such as a Masters degree, PhD, or certifications is desirable.
• Audit Management
• Continuous Monitoring
• Control Assessment
• Internal Controls
• Process Control
• Risk Assessments
• Risk Management

Responsibilities

• Oversees and approves the execution of the audit plan to ensure consistency in documentation and communication of conclusions and recommendations to external auditors, bank regulators, business units and senior management, audit management and leadership, and stakeholders, inclusive of cross functional/risk domain assessments; serves as the relationship manager between audit and the business; advises on strategic priorities and complex audits, including those with potential regulatory impact, audits where a heightened level of risk is assumed, and/or audits that require a heightened level of expertise.
• Approves annual and dynamic audit planning and risk assessments at the macro level (audit plan/audit universe); approves audit plan scopes, objectives, and work plans at the micro level (audit engagement); approves deployment of team resources; oversees the development of team members; invests in employee learning and development through training, mentorship, and coaching (talent management).
• Specializes in internal and external audit and industry trends to assure audit processes and audit plan remain effective; contributes new ideas and methods to solve problems and drive change, with a focus on broad/big picture POV; advises on best practices and challenges audit practices accordingly.
• Leads with a collaborative mindset and behavior that aligns parties in a collective direction that enables the accomplishment of a shared goal; develops and maintains productive client and team relationships; advises on internal audit department procedures and practices, inclusive of dynamic audit principles to organize around the delivery of a project; manages effective and timely delivery of the organization's mission and service.
• Embraces change and skillfully manages unexpected circumstances; forges productive working relationships across business segments; demonstrates resiliency.
• Possesses a forward-thinking mindset, champions innovation and effectively leads through innovation and change.

Benefits

• PNC offers a comprehensive range of benefits to help meet your needs now and in the future.
• Depending on your eligibility, options for full-time employees include: medical/prescription drug coverage (with a Health Savings Account feature), dental and vision options; employee and spouse/child life insurance; short and long-term disability protection; 401(k) with PNC match, pension and stock purchase plans; dependent care reimbursement account; back-up child/elder care; adoption, surrogacy, and doula reimbursement; educational assistance, including select programs fully paid; a robust wellness program with financial incentives.
• In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service.
• To learn more about these and other programs, including benefits for full time and part-time employees, visit pncthrive.com.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager