Security Specialist (Management of Vulnerabilities)

PNC•Strongsville, OH

20h•Onsite

About The Position

At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Security Specialist (Management of Vulnerabilities) within PNC's Technology organization, you will be based in Pittsburgh PA, Strongsville OH, Birmingham AL or Farmers Branch TX. The role requires centralized management of vulnerabilities, focusing on high-level management and setting baselines rather than hands-on remediation, and interacting with teams and stakeholders. PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position. The position provides technical evaluation and analysis in a specific Security area, supporting activities, processes, and tools to improve the overall security posture. It does not involve Architect or Engineering responsibilities. The specialist applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, creates documentation, performs investigation and data loss prevention, data manipulation, and coordination of activities. They perform actions to address or mitigate risks and vulnerabilities, review and define controls, and advise on complex security procedures and products. The role also involves participating in enforcement of control security risks and threats, sharing knowledge with staff, conducting security assessments, investigating and recommending corrective actions for data security, developing policies and procedures to standardize security functions, and overseeing that business needs are met during development. PNC employees are expected to be customer-focused and adept at managing risk.

Requirements

Centralized management of vulnerabilities
Management of, not hands on remediation
Set baselines, high level management of vulnerabilities
Interact with teams and stakeholders
University / college degree, with 5+ years of industry-relevant experience (or comparable combination of education, job specific certification(s), and experience)
Bachelors degree
Analytical Thinking
Effective Communications
Information Assurance
Information Security Management
Information Security Technologies
IT Environment
IT Standards, Procedures & Policies
IT Systems Management
Problem Solving
Software Security Assurance
Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions
Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework

Nice To Haves

Access Control (AC)
Building Architecture
Customer Solutions
Disaster Recovery Planning
Information Security
Information Security Risk
Network Security
Physical Security
Risk Assessments
Security Technologies
Vulnerability Management

Responsibilities

Centralized management of vulnerabilities
Management of, not hands on remediation
Set baselines, high level management of vulnerabilities
Interact with teams and stakeholders
Provides technical evaluation and analysis in a specific Security area
Supports activities, process, and tools needed to improve overall security posture of the organization
Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation
Performs investigation and data loss prevention, data manipulation, and coordination of activities
Performs actions to address or mitigate risks and vulnerabilities
Reviews and defines controls
Advises on more complex security procedures and products for clients, security administrators and network operations
Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion
Shares knowledge with staff
Conducts security assessments and other information security routines consistently
Investigates and recommends corrective actions for data security related to established guidelines
Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats
Oversees that business needs are being met during development