Security Manager Senior, Identity Controls Governance

PNC•Strongsville, OH

1d•$146,300 - $298,870•Onsite

About The Position

The Security Manager Senior, Identity Controls Governance, provides leadership and oversight for enterprise Identity and Access Management (IAM) controls to ensure access is appropriately governed, risk-based, and aligned with business, cybersecurity, and regulatory requirements. The role is within PNC’s Technology organization and is based in Dallas, Denver, Phoenix, Birmingham, Pittsburgh, or Cleveland. PNC describes this as an in-office role. The position manages multiple teams responsible for maintaining the confidentiality, integrity, and availability of data, systems, and networks, and oversees applicable security technology products. It develops and enhances policies and procedures, provides technical and professional advice, and oversees administrative staff and their development. The role also supports customer focus and effective risk management, while modeling PNC’s people-manager expectations around inclusion, values, change, results, and talent development.

Requirements

Experience in Identity and Access Management, cybersecurity, technology risk, or controls governance in a complex enterprise environment.
Strong knowledge of IGA, PAM, identity lifecycle management, access certification, SoD, privileged access, and access control concepts.
Demonstrated experience leading cross-functional initiatives and driving complex programs from strategy through execution.
Understanding of cybersecurity risk management, regulatory compliance, audit, and control effectiveness.
Strong communication, leadership, problem-solving, and stakeholder management skills.
Typically, a university or college degree; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Industry-relevant experience is typically 8 or more years.
Typically, at least 5 years of prior management experience.
Proven leadership experience with a moderate to large scope of responsibility.
Bachelor’s degree listed under Education.

Nice To Haves

Experience in a large, highly regulated financial services or Fortune 100 environment.
Experience with enterprise identity technologies such as SailPoint, Saviynt, CyberArk, or Microsoft Entra ID Governance.
Knowledge of Zero Trust, NIST Cybersecurity Framework, NIST SP 800-53, and related security and controls frameworks.
Experience governing emerging identity types, including service accounts, machine identities, workloads, and AI/agent identities.
Relevant professional certifications such as CISSP, CISM, CRISC, or CISA.
Higher-level education such as a master’s degree or PhD, or certifications, is desirable.
Preferred skills include business continuity, data privacy, disaster recovery, information security, network security, risk management, security audit, security management, security operations, and vulnerability management.

Responsibilities

Provide governance and oversight for Identity Governance and Administration (IGA) and Privileged Access Management (PAM) controls.
Lead identity lifecycle, access certification, Segregation of Duties (SoD), privileged access governance, and risk-based access control activities.
Establish governance across workforce, third-party, privileged, service, machine, and other non-human identities.
Monitor identity control effectiveness, identify control gaps and risks, and coordinate remediation with accountable stakeholders.
Support regulatory compliance, audit readiness, risk assessments, and control testing.
Partner with Cybersecurity, Technology, Risk, Audit, Compliance, and business functions to strengthen identity controls while supporting business objectives.
Develop metrics and reporting on identity risk, control effectiveness, and remediation progress.
Promote continuous improvement and automation of identity governance and control processes.
Manage multiple teams focused on protecting the confidentiality, integrity, and availability of data, systems, and networks.
Oversee applicable security technology products for network, systems, and data.
Develop, implement, and enhance policies and procedures to improve organizational operations and effectiveness.
Provide technical and professional advice or knowledge in areas of responsibility.
Oversee and manage administrative staff and support their professional and personal growth and development.
Assess and manage risks associated with business objectives and activities in alignment with PNC’s Enterprise Risk Management Framework.
Model people-manager expectations by cultivating inclusive teams, role-modeling PNC values, driving change, owning results, and developing talent.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature, for eligible full-time employees.
Dental and vision options.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension plan.
Stock purchase plan.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select programs that are fully paid.
Wellness program with financial incentives.
Maternity and/or parental leave, depending on eligibility.
Up to 11 paid holidays each year, depending on eligibility.
9 occasional absence days each year, unless otherwise required by law, depending on eligibility.
15 to 25 vacation days each year depending on career level and years of service, subject to eligibility.
Incentive-eligible compensation based on company, business, and/or individual performance.