Security Specialist Senior - WIAM Governance, Architecture & Risk Advisory Lead

PNC Bank•Pittsburgh, PA

5d•Onsite

About The Position

PNC is hiring a Security Specialist Senior within its Technology organization to lead enterprise-wide WIAM (workforce identity and access management) governance. The role defines, scales, and sustains governance practices aligned across policy, risk, controls, and operations. It provides IAM architecture guidance and risk and control consulting to engineering, operations, and business partners, with the goal of securing solutions by design and meeting governance standards. This senior leadership role has enterprise-level ownership of WIAM governance activities, substantial autonomy to set the vision, priorities, and operating model, and direct influence over risk posture, regulatory compliance, and audit outcomes. It drives consistency, scalability, and maturity across IAM governance. The position is based in Pittsburgh, Pennsylvania; Cleveland, Ohio; Birmingham, Alabama; Denver, Colorado; Dallas, Texas; or Phoenix, Arizona. PNC describes itself as an in-office company; candidates are encouraged to discuss workplace expectations with the recruiter and hiring manager. The role provides technical evaluation and analysis in a security area, subject-matter expertise, and advice on complex security procedures and products. It reviews and defines controls, conducts security assessments and investigations, recommends corrective actions, develops security policies and procedures, and aligns controls to the enterprise framework. It also supports audit readiness, regulatory alignment, and internal and external assessments. PNC will not sponsor employment visas or participate in STEM OPT for this position.

Requirements

At least 7 years of experience in IAM along with cybersecurity governance, risk, controls, audit, or related security leadership roles.
Deep expertise in IAM governance, risk management, controls, and regulatory expectations.
Proven experience designing and scaling enterprise governance frameworks.
Strong understanding of control design, effectiveness testing, and audit defense.
Ability to connect policy, risk, and control execution across complex environments.
Advanced analytical skills, including trend analysis and risk-based decision-making.
Strong leadership, influencing, and stakeholder engagement capabilities across all levels.
Experience in highly regulated environments; financial services experience is preferred.
Bachelor’s degree; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Industry-relevant experience is typically 8 or more years for roles at this level.
Demonstrated knowledge, skills, and abilities appropriate to the role.

Nice To Haves

CISSP, CISM, CRISC, CGRC, or equivalent governance or risk credentials.
Experience in financial services.
Preferred skills include data security, incident response, information security, network security, security audit, security awareness, security operations, security policies, and vulnerability management.
Preferred competencies include analytical thinking, effective communications, information assurance, information security management and technologies, IT environment, IT standards, procedures and policies, IT systems management, knowledge of organization, problem solving, and software security assurance.
Master’s degree, Ph.D., or certifications are desirable.

Responsibilities

Define and evolve the WIAM governance framework, including policy alignment, control design standards, and the operating model.
Establish and lead a centralized governance capability to promote consistency across IAM domains and processes.
Connect issues, risks, controls, and policy to ensure traceability, defensibility, and regulatory compliance.
Lead enterprise-wide efforts to identify systemic risks, prioritize remediation, and improve control sustainability.
Define and monitor governance KPIs, scorecards, and maturity metrics, and drive continuous improvement.
Provide strategic direction for audit readiness, regulatory alignment, and internal and external assessments.
Partner with senior leaders across IAM engineering, operations, and business units to encourage adoption of governance standards.
Translate complex risk and control concepts into clear, actionable insights for leadership and influence decision-making.
Establish scalable processes that reduce reactive issue management and support proactive risk mitigation.
Mentor and develop junior team members and promote consistent governance best practices.
Provide technical evaluation and analysis, apply security concepts, review information and logs, execute defined tasks, analyze requirements, and create documentation.
Conduct security assessments and information security routines; investigate security matters and recommend corrective actions.
Review and define controls, devise control implementation strategies, and align controls in the security area with the enterprise framework.
Develop policies and procedures to standardize security functions and address potential vulnerabilities and threats.
Advise clients, security administrators, and network operations on complex security procedures and products.
Support enforcement of security controls and mitigation of risks, vulnerabilities, and threats.
Oversee that business needs are met during development and share security knowledge with staff.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature, subject to eligibility.
Dental and vision options.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension and stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select fully paid programs.
Wellness program with financial incentives.
Maternity and/or parental leave, subject to eligibility.
Up to 11 paid holidays each year, subject to eligibility.
Nine occasional absence days each year, unless otherwise required by law.
15 to 25 vacation days each year depending on career level and years of service.
Incentive-eligible compensation based on company, business, and/or individual performance.