Technology Risk Manager Sr

PNC•Strongsville, OH

20h•$146,300 - $326,040•Onsite

About The Position

The Technology Risk Manager Sr – Cyber Risk Quantification serves as a senior risk leader responsible for establishing and overseeing quantitative technology risk management practices within the Line of Business. The role provides strategic leadership for identifying, measuring, monitoring, and reporting technology risk exposures, and supports executive decision-making with data-driven insights. It partners with Technology, Information Security, Operational Risk, Audit, Compliance, Finance, and Enterprise Risk Management teams to mature Cyber Risk Quantification capabilities aligned with PNC’s Enterprise Risk Management Framework and regulatory expectations. The position leads technology risk functions and programs, establishes governance and oversight processes, and directs risk identification, assessment, mitigation, and monitoring across multiple domains. It advises senior technology leaders, supports executive and Board reporting, and leads cross-functional risk assessments, stress testing, resilience analyses, and emerging-risk evaluations. The role also develops technology risk professionals and strengthens organizational capabilities in quantitative analysis and risk-informed decision-making. The position is based in Pittsburgh, Pennsylvania; Dallas, Texas; Denver, Colorado; Strongsville, Ohio; Columbus, Ohio; or Birmingham, Alabama. PNC describes itself as an in-office company. The role is incentive eligible. PNC will not provide employment visa sponsorship or participate in STEM OPT for this position.

Requirements

Typically requires a university or college degree; a comparable combination of education, job-specific certifications, and experience, including military service, may be considered in lieu of a degree.
Typically requires 8 or more years of industry-relevant experience.
Typically requires at least 5 years of prior management experience.
Requires proven leadership experience with a moderate to large scope of responsibility.
Required skills include Cyber Risk Quantification, Cyber Security, Third-Party Technology Strategic Planning, Risk Management Programs, Regulatory Compliance, People Leadership, Key Risk Indicators, Information Security, Influencing Change, Emerging Risks, Credible Challenge, Conflict Management, and Cloud Governance.
Competencies include Decision Making and Critical Thinking, Effective Communications, Industry Knowledge, Information Security Management, Internal Controls, IT Environment, Managing Multiple Priorities, Operational Risk, Organizational Governance, Organizational Savvy and Politics, Regulatory Environment – Financial Services, and Talent Management.
Demonstrable proficiency with Cyber Risk Quantification tools such as Axio 360 and Ostrich Cyber Risk.
Bachelor’s degree is listed under Education.
No required certifications or licenses are listed.
Must meet applicable Section 19 of the Federal Deposit Insurance Act requirements and, for any registered role, applicable SAFE Act and/or FINRA requirements.
Must be able to work in an in-office environment; workplace expectations should be confirmed with the recruiter and hiring manager.

Nice To Haves

Higher education such as a master’s degree or PhD, or certifications, is desirable.
Preferred skills include Change Management, Conflict Management, Crisis Management Planning, Emerging Risks, Operations Management, Program Risk Management, Risk Management Programs, and Strategic Planning.

Responsibilities

Establish and maintain a Cyber Risk Quantification program that helps business and technology leaders understand cyber, operational, infrastructure, and emerging technology risks in financial terms.
Develop and enhance quantitative methodologies, models, and frameworks for measuring technology risk exposures, including cybersecurity events, outages, data loss, privilege misuse, fraud, third-party dependencies, and AI risks.
Oversee the development of risk scenarios, loss-event libraries, threat intelligence inputs, and control-effectiveness analyses.
Partner with Technology and Information Security teams to identify key risk indicators, control performance metrics, risk concentrations, and leading indicators.
Provide credible challenge and independent assessment of technology risk exposures, risk acceptance decisions, and remediation priorities.
Align Cyber Risk Quantification practices with PNC’s Enterprise Risk Management Framework, Operational Risk Management Standards, OCC Heightened Standards, model governance and risk measurement expectations, and industry frameworks including NIST, FAIR, CIS, and COBIT.
Support executive management, risk committees, and Board reporting with quantitative risk insights and scenario-based analyses.
Lead cross-functional technology risk assessments, stress testing, operational resilience analyses, and emerging-risk evaluations.
Monitor internal and external risk trends, threat developments, technology modernization initiatives, and regulatory changes to identify emerging risks.
Oversee risk dashboards and risk appetite metrics used to monitor exposure against established thresholds.
Develop and mentor technology risk professionals and build organizational capabilities in quantitative risk analysis and risk-informed decision-making.
Develop and enhance technology loss-estimation methodologies; evaluate loss-frequency and severity drivers; perform Monte Carlo, scenario-based, and probabilistic analyses where applicable; and support capital planning and enterprise risk aggregation.
Lead enterprise technology risk scenario development across cybersecurity, infrastructure availability, cloud services, identity and access management, data protection, artificial intelligence, and third-party technology risk.
Produce executive-level insights that translate technical risk into business impacts across financial, operational, customer, regulatory, and reputational perspectives; present findings to senior leaders, steering committees, and other governance forums.
Lead large-scale technology risk functions or programs and drive continuous enhancement of the technology risk management framework.
Establish governance processes that provide clear accountability, effective oversight, and consistent adoption of risk frameworks, policies, and standards.
Act as a trusted advisor to senior technology leadership, influence decisions, and ensure timely escalation and resolution of critical risks.
Oversee risk reporting, metrics, and analytics to provide clear, actionable insights and strengthen a risk-aware culture.
Demonstrate customer focus and manage risks in accordance with PNC’s Enterprise Risk Management Framework.
As a people manager, cultivate inclusive teams, model PNC’s values, drive change and innovation, take ownership of results, empower others, and develop employees.

Benefits

Medical and prescription drug coverage, including a Health Savings Account feature.
Dental and vision options.
Employee and spouse/child life insurance.
Short- and long-term disability protection.
401(k) with PNC match.
Pension plan.
Stock purchase plans.
Dependent care reimbursement account.
Back-up child and elder care.
Adoption, surrogacy, and doula reimbursement.
Educational assistance, including select fully paid programs.
Wellness program with financial incentives.
Maternity and/or parental leave, depending on eligibility.
Up to 11 paid holidays each year, depending on eligibility.
Nine occasional absence days each year, unless otherwise required by law.
15 to 25 vacation days each year depending on career level, plus time based on years of service.
Performance-based incentive compensation.