Security Manager Sr - Security Policy & Controls Governance

PNC

1d • Onsite

About The Position

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Manager Sr within PNC’s Technology organization, you will be based in Pittsburgh, PA. Scope of Responsibilities: The Senior Security Manager will lead a service “Security Policy & Controls Governance”. Responsibilities include the management of the Information Security Policies, ensuring that the Security programs, policies and controls/procedures are aligned to regulatory requirements and industry expectations. To continue building maturity, the service leads the alignment to the CRI FS Profile as the primary diagnostic framework. Additionally, the service is expected to provide policy and control guidance for emerging technologies like cloud, artificial intelligence and post-quantum cryptography. The team this person will lead and manage includes the Security Awareness and Education service and partnering with partner groups in security to build a security-minded culture. • Partner with the lines of business and other security partners on ensuring gaps are remediated, and risks are mitigated as appropriate per the organization’s risk appetite. • Provide support of internal audits and regulatory exams across the Security portfolio, providing guidance, oversight and coordination as needed. • Keep up to date with the regulatory landscape, partnering with internal legal and regulatory intelligence services, and strategic security partnerships. • Help to influence the financial services sector’s adoption of standards, frameworks and guidance. • Continue maturing the Cybersecurity Awareness and Education program inclusive of testing the PNC workforce and ensuring the effectiveness of security training programs. Skills: Experience with FFIEC, PCI, HIPAA, and NIST. Experience aligning controls and policies to best practices and requirements. • Experience with consulting and advising security services on improving maturity of their service to ensure they meet updated guidance and requirements. • Experience leading, developing and coaching people • Experience setting and executing strategy • Experience with managing projects (both formal projects and small work efforts) • Experience with developing and implementing some level of automation, innovation in reporting and analysis. • Be meticulous about documentation and uphold the tenants of Credibility and Defensibility. The role includes a team of Security Analysts and Specialists who have experience in policy, controls and compliance, but range in the years of experience PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position. Job Description Manages multiple teams focused on maintaining confidentiality, integrity, and availability of data, systems, and networks. Responsible for management and oversight of applicable security technology products for network, systems and data. Develops, implements and enhances policies and procedures to improve the operation and effectiveness of the organization. Provides technical and professional advice or knowledge regarding various administrative areas of responsibility. Oversees and manages administrative staff. Provides professional and personal growth and development to individuals as appropriate. PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be: Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions. Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Requirements

• Experience with FFIEC, PCI, HIPAA, and NIST.
• Experience aligning controls and policies to best practices and requirements.
• Experience with consulting and advising security services on improving maturity of their service to ensure they meet updated guidance and requirements.
• Experience leading, developing and coaching people
• Experience setting and executing strategy
• Experience with managing projects (both formal projects and small work efforts)
• Experience with developing and implementing some level of automation, innovation in reporting and analysis.
• Be meticulous about documentation and uphold the tenants of Credibility and Defensibility.
• Roles at this level typically require a university / college degree.
• Industry-relevant experience is typically 8+ years.
• At least 5 years of prior management experience is typically required.
• Proven leadership experience with a moderate to large scope of responsibility is required.

Nice To Haves

• Access Control (AC)
• Building Architecture
• Customer Solutions
• Disaster Recovery Planning
• Information Security
• Network Security
• NIST Standards
• People Management
• Physical Security
• Regulatory Compliance
• Regulatory Governance
• Risk Assessments
• Security Technologies

Responsibilities

• Partner with the lines of business and other security partners on ensuring gaps are remediated, and risks are mitigated as appropriate per the organization’s risk appetite.
• Provide support of internal audits and regulatory exams across the Security portfolio, providing guidance, oversight and coordination as needed.
• Keep up to date with the regulatory landscape, partnering with internal legal and regulatory intelligence services, and strategic security partnerships.
• Help to influence the financial services sector’s adoption of standards, frameworks and guidance.
• Continue maturing the Cybersecurity Awareness and Education program inclusive of testing the PNC workforce and ensuring the effectiveness of security training programs.
• Manages multiple teams focused on maintaining confidentiality, integrity, and availability of data, systems, and networks.
• Responsible for management and oversight of applicable security technology products for network, systems and data.
• Develops, implements and enhances policies and procedures to improve the operation and effectiveness of the organization.
• Provides technical and professional advice or knowledge regarding various administrative areas of responsibility.
• Oversees and manages administrative staff.
• Provides professional and personal growth and development to individuals as appropriate.

Benefits

• PNC offers a comprehensive range of benefits to help meet your needs now and in the future.
• Depending on your eligibility, options for full-time employees include: medical/prescription drug coverage (with a Health Savings Account feature), dental and vision options; employee and spouse/child life insurance; short and long-term disability protection; 401(k) with PNC match, pension and stock purchase plans; dependent care reimbursement account; back-up child/elder care; adoption, surrogacy, and doula reimbursement; educational assistance, including select programs fully paid; a robust wellness program with financial incentives.
• In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior