Independent Tech Risk Manager Sr

PNC Bank•Pittsburgh, PA

6d•Onsite

About The Position

The Independent Tech Risk Manager Sr is a highly experienced second-line-of-defense independent contributor within PNC's BSA/AML organization. The role provides independent oversight, credible challenge, and risk advisory services across the enterprise fraud risk management program, partnering with business, operations, technology, and risk leaders to identify emerging fraud threats, assess controls and risk practices, and support alignment with regulatory expectations and enterprise risk standards. It operates with substantial autonomy and influence, supports risk-informed decisions, and escalates material risks through appropriate governance channels while maintaining second-line independence. The position also oversees and designs the Independent Technology Risk Management (ITRM) program and related communications. It applies expertise in technology environments, governance and control frameworks, security, threat intelligence, and risk analytics to review, challenge, monitor, and communicate technology and associated security risks. The role coordinates ITRM activities, supports governance and oversight, and ensures the program is maintained and enhanced to help businesses manage technology risks within risk appetite and regulatory expectations. It works with business teams and risk partners to identify technology exposures, review self-assessments, and report results to senior management. The position is based in one of the listed locations: Pittsburgh, PA; Houston, TX; Dallas, TX; Raleigh, NC; Charlotte, NC; Birmingham, AL; Cleveland, OH; Chicago, IL; Washington, DC; Denver, CO; or Phoenix, AZ. PNC describes itself as an in-office company. The role is incentive eligible, with payment based on company, business, and/or individual performance. PNC will not provide employment visa sponsorship or participate in STEM OPT for this position.

Requirements

At least 15 years of experience in fraud risk management, financial crimes, fraud operations, fraud strategy, fraud analytics, fraud investigations, or related disciplines within banking, payments, financial services, fintech, or another regulated financial institution.
Demonstrated expertise across multiple fraud domains, including payment fraud, account takeover, identity fraud, digital fraud, check fraud, card fraud, and emerging fraud threats.
Strong understanding of enterprise risk management, operational risk management, and second-line-of-defense responsibilities.
Proven ability to provide effective challenge and influence senior leaders without direct reporting authority.
Experience interacting with regulators, auditors, risk committees, and executive leadership.
Strong analytical, communication, presentation, and executive briefing skills.
Bachelor's degree in Business, Finance, Risk Management, Criminal Justice, Information Security, or a related field; a comparable combination of education, job-specific certifications, and experience may be considered in lieu of a degree.
Knowledge, skills, and abilities appropriate to the role, including decision-making and critical thinking, industry knowledge, information security management, internal controls, IT environments, organizational savvy, and planning and organizing work.
At least 5 years of prior management experience is typically required; proven leadership experience with a moderate to large scope of responsibility is required.
Industry-relevant experience is typically 8 or more years according to the general role-level qualifications.
No required certifications or licenses are listed.
Must meet applicable Section 19 of the Federal Deposit Insurance Act requirements and, for any registered role, applicable SAFE Act and/or FINRA requirements.

Nice To Haves

One or more industry-recognized fraud certifications, such as Certified Fraud Examiner (CFE), Certified Financial Crimes Specialist (CFCS), Accredited Payments Risk Professional (APRP), Certified Anti-Money Laundering Specialist (CAMS), or an equivalent certified risk or fraud credential.
Advanced degree such as an MBA, MS, JD, or related field.
Experience within a large, complex financial institution subject to heightened regulatory expectations.
Demonstrated leadership in industry fraud forums, consortiums, or professional associations.
Experience developing fraud risk appetite metrics, key risk indicators, and executive-level risk reporting.
Master's degree, PhD, or certifications are desirable for the role level.

Responsibilities

Provide independent oversight and credible challenge of fraud risk management activities across business lines, operations, and technology functions.
Assess the design and effectiveness of fraud prevention, detection, investigation, and recovery controls.
Evaluate emerging fraud threats, fraud loss trends, and changes in the external threat landscape, and recommend risk mitigation strategies.
Review and challenge fraud-related risk assessments, control assessments, risk acceptance decisions, and remediation plans.
Partner with first-line teams to ensure fraud risks are identified, measured, monitored, and managed within established risk appetite.
Provide subject matter expertise on fraud risk governance, regulatory expectations, and industry practices.
Translate complex fraud risks into clear, actionable narratives for senior management, risk committees, and executive leadership.
Support development and enhancement of fraud risk frameworks, policies, standards, metrics, and reporting.
Challenge business initiatives, products, channels, and technology changes for potential fraud risk impacts.
Monitor key fraud risk indicators and emerging risk signals, and escalate material concerns through appropriate governance forums.
Support internal audit reviews, regulatory examinations, and independent risk assessments related to fraud risk.
Serve as a trusted advisor and thought leader on fraud risk across the organization.
Oversee and design the Independent Technology Risk Management (ITRM) program and related communication strategies.
Independently review, challenge, monitor, and communicate technology and associated security risk issues.
Coordinate ITRM activities in support of Independent Risk Management strategy, governance, oversight, and analysis of technology risk domain activities.
Maintain and enhance the ITRM program to support business management of technical risks, regulatory expectations, and risk appetite.
Oversee timely and proper execution of the ITRM program within and across lines of business, using experience with security, threat intelligence, and risk analytics.
Work with businesses and risk partners, including Compliance, Security, and Technology, to proactively identify technology risk exposures across PNC.
Review and report business self-assessment results, including new initiatives, business-as-usual activities, and risk management programs, to higher-level management.
Demonstrate customer focus and effectively manage risks associated with business objectives and activities in accordance with PNC's Enterprise Risk Management Framework.
As a people manager, cultivate diverse and inclusive teams, role-model company values, drive change and innovation, take ownership of results, empower employees, and develop talent.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature, subject to eligibility.
Dental and vision options, subject to eligibility.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension and stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select programs that are fully paid.
Wellness program with financial incentives.
Maternity and/or parental leave, depending on eligibility.
Up to 11 paid holidays each year, depending on eligibility.
9 occasional absence days each year, unless otherwise required by law.
Between 15 and 25 vacation days each year, depending on career level and years of service.
Incentive-eligible compensation based on company, business, and/or individual performance.