Security Specialist WIAM Governance

PNC Bank•Pittsburgh, PA

2d•Onsite

About The Position

Intermediate-level role responsible for owning governance processes and ensuring alignment across policy, risk, and control execution. PNC is an in-office company that fosters a supportive culture where employees can thrive and achieve balance. We encourage candidates to connect with their recruiter and hiring manager to understand workplace expectations and ensure the role aligns with their goals. PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position. Provides technical evaluation and analysis in a specific Security area. Supports activities, process, and tools needed to improve overall security posture of the organization. Primary responsibilities do not include Architect or Engineering responsibilities. Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls. Advises on more complex security procedures and products for clients, security administrators and network operations. Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff. Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines. Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats. Oversees that business needs are being met during development. PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be: Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions. Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.

Requirements

Strong understanding of IAM governance, risk, and controls frameworks
Experience with control design, validation, and audit support
Analytical mindset with ability to identify root cause vs. symptoms
Ability to influence partners and drive process adherence
Roles at this level typically require a university / college degree, with 5+ years of industry-relevant experience.
Specific certifications are often required.
In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.

Nice To Haves

CISA, CRISC, CGRC (role-dependent; progress toward CISM is a plus).

Responsibilities

Own and manage WIAM governance processes (e.g., certifications, control validation, issue lifecycle)
Ensure alignment of issues → risk → controls → policy, improving traceability and defensibility
Analyze trends in metrics and identify systemic control gaps
Partner with application teams and stakeholders to drive remediation and control consistency
Contribute to development of governance standards, procedures, and job aids
Support audit engagements with clear, defensible evidence and narratives
Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation.
Performs investigation and data loss prevention, data manipulation, and coordination of activities.
Performs actions to address or mitigate risks and vulnerabilities.
Reviews and defines controls.
Advises on more complex security procedures and products for clients, security administrators and network operations.
Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion.
Shares knowledge with staff.
Conducts security assessments and other information security routines consistently.
Investigates and recommends corrective actions for data security related to established guidelines.
Develops policies and procedures to standardize security functions and eliminate potential vulnerabilities and threats.
Oversees that business needs are being met during development.

Benefits

medical/prescription drug coverage (with a Health Savings Account feature)
dental and vision options
employee and spouse/child life insurance
short and long-term disability protection
401(k) with PNC match
pension and stock purchase plans
dependent care reimbursement account
back-up child/elder care
adoption, surrogacy, and doula reimbursement
educational assistance, including select programs fully paid
a robust wellness program with financial incentives
maternity and/or parental leave
up to 11 paid holidays each year
9 occasional absence days each year, unless otherwise required by law
between 15 to 25 vacation days each year, depending on career level; and years of service.