Risk and Control Advisor - Business Resiliency Oversight

PNC•Strongsville, OH

3d•$91,000 - $202,800•Onsite

About The Position

As a Risk and Control Advisor within PNC's Independent Risk Management organization, this role provides independent, risk-based oversight and effective challenge of the Business Resiliency and Operational Resilience Program. It evaluates whether resilience risks are understood, managed within tolerance, and appropriately escalated, and assesses program design and execution across resilience methodologies, governance, business impact analyses, plans, testing, training, issues, and risk acceptances. The role conducts annual and quarterly risk assessments and targeted reviews to identify elevated risk, emerging concerns, systemic weaknesses, and inconsistencies in reported risk conclusions. It evaluates resilience across technology, data, and third-party dependencies, including concentration risk, disaster recovery capabilities, and the ability of critical services to recover within approved tolerances. The advisor analyzes incidents, exercises, and testing outcomes to determine whether resilience strategies and capabilities are realistic, executable, and effective under stress. The position aggregates oversight results into clear risk conclusions, findings, escalations, and decision-ready reporting; monitors regulatory and industry developments; and supports the 2LOD Business Resiliency Risk Enhancements and Operating Plan. It partners within risk management to plan and execute the risk management program and communication strategies, engages lines of business to review and challenge compliance, coordinates program execution to meet regulatory expectations, and provides risk expertise to identify exposures across PNC. The role also challenges business self-assessment results and reviews applicable independent analyses. The position is based in Pittsburgh, Pennsylvania; Cleveland, Ohio; Birmingham, Alabama; or Charlotte, North Carolina. PNC describes itself as an in-office company. The role is incentive eligible, with payment based on company, business, and/or individual performance.

Requirements

Bachelor's degree.
At least 5 years of industry-relevant experience typically required at this role level; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Demonstrated appropriate knowledge, skills, and abilities for the role.
No required certifications.
No required licenses.

Nice To Haves

Skills in compliance reporting, customer risk, decision making, regulatory requirements, risk assessments, risk control, and strategic objectives.
Competencies in decision making and critical thinking, fraud management, internal controls, operational risk, organizational savvy and politics, planning and organizing, problem solving, and process management.

Responsibilities

Provide independent, risk-based oversight and effective challenge of the Business Resiliency and Operational Resilience Program.
Assess whether resilience risks are understood, managed within tolerance, and appropriately escalated.
Assess program design and execution across resilience methodologies, governance, business impact analyses, plans, testing, training, issues, and risk acceptances.
Execute annual and quarterly risk assessments and targeted reviews to identify elevated risk, emerging concerns, systemic weaknesses, and inconsistencies in reported risk conclusions.
Evaluate resilience across technology, data, and third-party dependencies, including concentration risk, disaster recovery capabilities, and recovery of critical services within approved tolerances.
Analyze incidents, exercises, and testing outcomes to assess whether resilience strategies and capabilities are realistic, executable, and effective under stress.
Aggregate oversight results into risk conclusions, findings, escalations, and decision-ready reporting.
Monitor regulatory and industry developments and support the 2LOD Business Resiliency Risk Enhancements and Operating Plan.
Partner within risk management to plan and execute the risk management program and corresponding communication strategies.
Engage lines of business to review and challenge compliance with programs.
Coordinate and implement the risk management program to meet regulatory expectations and coordinate its timely and proper execution within and across lines of business.
Consult with business partners on execution of risk management program components.
Provide risk expertise while working with businesses and risk partners, including Compliance and Technology Risk, to proactively identify risk exposures across PNC.
Challenge business self-assessment results, including those relating to new initiatives, business-as-usual activities, and the risk management program, and review applicable independent analyses.
Assess and effectively manage risks associated with business objectives and activities to support PNC's Enterprise Risk Management Framework.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature.
Dental and vision options.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension plan.
Stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select programs fully paid.
Wellness program with financial incentives.
Maternity and/or parental leave.
Up to 11 paid holidays each year.
9 occasional absence days each year, unless otherwise required by law.
15 to 25 vacation days each year, depending on career level and years of service.
Incentive-eligible compensation based on company, business, and/or individual performance.