Security Analyst- Tokenization

PNC•Two PNC Plaza (PA374), MO

2d•Hybrid

About The Position

The Data Protection Adoption Lead for Tokenization is responsible for accelerating enterprise adoption delivery of tokenization and data protection services across business and technology organizations. Acting as the primary advocate and strategic advisor for enterprise tokenization services, this role partners with application teams, business stakeholders, security organizations, engineering teams, and service providers to drive adoption and integration of Data Protection’s tokenization capabilities across the enterprise. The role is accountable for developing adoption strategies, identifying and prioritizing tokenization opportunities, guiding application teams through onboarding and implementation readiness, and providing governance throughout the implementation lifecycle. Success in this role will be measured by increased adoption of tokenization services, reduced sensitive data exposure, improved implementation readiness, effective risk management, and the delivery of scalable data protection solutions across the enterprise.

Requirements

Track record of leading enterprise-scale cybersecurity, data protection, or technology transformation initiatives involving multiple stakeholders, competing priorities, and complex implementation dependencies.
Strong understanding of application security, data protection technologies, tokenization, encryption, or related security domains.
Demonstrated success leading cross-functional initiatives and influencing application, engineering, security, and business stakeholders within complex enterprise environments.
Excellent communication and presentation skills with the ability to translate technical concepts into business value.
Strong analytical, risk management, and problem-solving skills with the ability to identify dependencies and implementation challenges.
Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Nice To Haves

Background supporting enterprise security programs or security transformation initiatives.
Knowledge of cryptographic technologies, tokenization platforms, PCI DSS, data privacy regulations, and secure data handling practices.
Familiarity with application onboarding, system integration, and enterprise architecture processes.
Proven success operating within large-scale technology or financial services environments.
Experience supporting product adoption, technology enablement, customer success, program management, or service delivery functions within cybersecurity organizations.
Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies

Responsibilities

Lead and influence a multi-year enterprise tokenization transformation initiative focused on reducing sensitive data exposure, improving regulatory compliance, and expanding adoption of enterprise data protection capabilities.
Serve as a trusted advisor to application teams by communicating the security, compliance, and business value of tokenization services and guiding teams through requirements, planning, and readiness assessments.
Partner with business, application, and security stakeholders to identify, prioritize, and advocate for tokenization opportunities based on sensitive data exposure, regulatory requirements, and risk reduction objectives.
Partner with Data Protection leadership to define and execute adoption strategies, success metrics, and long-term roadmaps that expand utilization of enterprise tokenization capabilities and advance data protection objectives.
Provide governance and oversight for tokenization implementations by aligning delivery teams with enterprise strategy, assessing readiness, managing onboarding priorities, and mitigating implementation risks.
Drive stakeholder engagement, executive communications, and enterprise awareness activities that support tokenization adoption objectives and strengthen understanding of data protection capabilities.
Identify and implement process improvements that enhance onboarding efficiency, implementation consistency, and overall program effectiveness while contributing to the advancement of enterprise data protection and cryptographic strategies.
Define, track, and analyze KPIs, KRIs, tokenization coverage, and sensitive data reduction metrics to measure program effectiveness, adoption success, and risk reduction outcomes.
Contribute to the development and execution of enterprise tokenization roadmaps aligned with business priorities, regulatory requirements, and security objectives.
Provides technical evaluation and analysis.
Supports activities, process, and tools needed to improve overall security posture of the organization.
Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.
Performs investigation and data loss prevention, data manipulation, and coordination of activities.
Performs actions to address or mitigate risks and vulnerabilities.
Reviews and defines controls.
Advises on more complex security procedures and products for clients, security administrators and network operations.
Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion.
Shares knowledge with staff.
Conducts security assessments and other information security routines consistently.
Investigates and recommends corrective actions for data security related to established guidelines.